Skip to content
OpenAdvisories
Unscored CVE-2019-1426 EUVD-2019-9983GHSA-5m34-66pw-cq8v

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge (HTML-based),…

Published Nov 12, 2019 · Updated Aug 4, 2024 · Assigned by microsoft

Vendor: Microsoft Product: ChakraCore Product: Microsoft Edge (EdgeHTML-based) on Windows 10 for 32-bit Systems Product: Microsoft Edge (EdgeHTML-based) on Windows 10 for x64-based Systems Product: Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for 32-bit Systems Product: Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for x64-based Systems Product: Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1709 for 32-bit Systems Product: Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1709 for ARM64-based Systems Product: Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1709 for x64-based Systems Product: Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for 32-bit Systems Product: Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for ARM64-based Systems Product: Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for x64-based Systems Product: Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for 32-bit Systems Product: Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for ARM64-based Systems Product: Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for x64-based Systems Product: Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1903 for 32-bit Systems Product: Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1903 for ARM64-based Systems Product: Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1903 for x64-based Systems Product: Microsoft Edge (EdgeHTML-based) on Windows Server 2016 Product: Microsoft Edge (EdgeHTML-based) on Windows Server 2019 Platform: Windows Category: Browsers

Description

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge (HTML-based), aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1427, CVE-2019-1428, CVE-2019-1429.

Affected products

VendorProductAffectedFixed
Microsoft Microsoft Edge (EdgeHTML-based) on Windows 10 for 32-bit Systems unspecified —
Microsoft Microsoft Edge (EdgeHTML-based) on Windows 10 for x64-based Systems unspecified —
Microsoft Microsoft Edge (EdgeHTML-based) on Windows Server 2016 unspecified —
Microsoft Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for 32-bit Systems unspecified —
Microsoft Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for x64-based Systems unspecified —
Microsoft Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1709 for 32-bit Systems unspecified —
Microsoft Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1709 for x64-based Systems unspecified —
Microsoft Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for 32-bit Systems unspecified —
Microsoft Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for x64-based Systems unspecified —
Microsoft Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for ARM64-based Systems unspecified —
Microsoft Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for 32-bit Systems unspecified —
Microsoft Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for x64-based Systems unspecified —
Microsoft Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for ARM64-based Systems unspecified —
Microsoft Microsoft Edge (EdgeHTML-based) on Windows Server 2019 unspecified —
Microsoft Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1709 for ARM64-based Systems unspecified —
Microsoft Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1903 for 32-bit Systems unspecified —
Microsoft Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1903 for x64-based Systems unspecified —
Microsoft Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1903 for ARM64-based Systems unspecified —
Microsoft ChakraCore unspecified —

References