CVE-2019-1299

EPSS 5.8%

Vexday Risk Score

3Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS —EPSS 5.8%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

11 sep 2019Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

An information disclosure vulnerability exists when Microsoft Edge based on Edge HTML improperly handles objects in memory, aka 'Microsoft Edge based on Edge HTML Information Disclosure Vulnerability'.

Productos afectados

Microsoft · Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for 32-bit Systems Microsoft · Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for ARM64-based Systems Microsoft · Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for x64-based Systems Microsoft · Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1903 for 32-bit Systems Microsoft · Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1903 for ARM64-based Systems Microsoft · Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1903 for x64-based Systems Microsoft · Microsoft Edge (EdgeHTML-based) on Windows Server 2019

Referencias

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1299