Description (CNA)
A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0609, CVE-2019-0680, CVE-2019-0769, CVE-2019-0770, CVE-2019-0771, CVE-2019-0773, CVE-2019-0783.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Microsoft / Microsoft Edge | affected Windows 10 Version 1803 for 32-bit Systems; affected Windows 10 Version 1803 for x64-based Systems; affected Windows 10 Version 1803 for ARM64-based Systems; affected Windows 10 Version 1809 for 32-bit Systems; affected Windows 10 Version 1809 for x64-based Systems |
| Microsoft / ChakraCore | affected Windows 10 Version 1809 for ARM64-based Systems; affected Windows Server 2019 |
CWE
No CWE identifiers supplied.
References
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0639
- https://www.zerodayinitiative.com/advisories/ZDI-20-122/
ADP enrichment
No English description supplied.