CVE-2019-1307

high · 7.5

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1308, CVE-2019-1335, CVE-2019-1366.

7.5

CVSS

10.1%

EPSS (exploit prob.)

95th

EPSS percentile

2019-10-10

Published

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Weaknesses

CWE-787

Affected products

Vendor	Product	Affected versions
microsoft	chakracore	< 1.11.14
microsoft	edge	all versions
microsoft	windows_10	all versions
microsoft	windows_10	1607
microsoft	windows_10	1703
microsoft	windows_10	1709
microsoft	windows_10	1803
microsoft	windows_10	1809
microsoft	windows_10	1903
microsoft	windows_server_2016	all versions
microsoft	windows_server_2019	all versions

Check a specific version with /api/v1/cve/match.

References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1307
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1307

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2019-1307