CVE-2019-1366

Quick assessment

Copy summary Copy citation

Affected

Microsoft Microsoft Edge (EdgeHTML-based) on Windows 10 for 32-bit Systems

Exploitation

High exploitation probability; assess promptly

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Microsoft ChakraCore和Microsoft Edge都是美国微软（Microsoft）公司的产品。ChakraCore是使用在Edge浏览器中的一个开源的ChakraJavaScript脚本引擎的核心部分，也可作为单独的JavaScript引擎使用。Microsoft Edge是一款Windows 10之后版本系统附带的Web浏览器。 Microsoft Edge和ChakraCore中存在远程代码执行漏洞。攻击者可利用该漏洞在当前用户的上下文中执行任意代码，损坏内存。

CVE-2019-1366 affects Microsoft Microsoft Edge (EdgeHTML-based) on Windows 10 for 32-bit Systems. High exploitation probability; assess promptly. Microsoft ChakraCore和Microsoft Edge都是美国微软（Microsoft）公司的产品。ChakraCore是使用在Edge浏览器中的一个开源的ChakraJavaScript脚本引擎的核心部分，也可作为单独的JavaScript引擎使用。Microsoft Edge是一款Windows 10之后版本系统附带的Web浏览器。 Mi CVE-2019-1366 vulnerability details, Shenlong CVE Platform, https://cve.imfht.com/detail/CVE-2019-1366

I. Basic Information for CVE-2019-1366

Affected Products

II. Public POCs for CVE-2019-1366

III. Intelligence Information for CVE-2019-1366

Vendor Advisories for CVE-2019-1366 (1)

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1366 x_refsource_MISC

• https://www.cve.org/CVERecord?id=CVE-2019-1366

Same Patch Batch · Microsoft · 2019-10-10 · 60 CVEs total

Showing top 20 of 60 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

V. Comments for CVE-2019-1366