First published: Wed Jun 12 2019(Updated: )
An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory in Microsoft Edge, aka 'Scripting Engine Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1023.
Credit: secure@microsoft.com
Affected Software | Affected Version | How to fix |
---|---|---|
Microsoft Chakra | <1.11.10 | |
Microsoft Edge Beta | ||
Microsoft Windows 10 | ||
Microsoft Windows 10 | =1607 | |
Microsoft Windows 10 | =1703 | |
Microsoft Windows 10 | =1709 | |
Microsoft Windows 10 | =1803 | |
Microsoft Windows 10 | =1809 | |
Microsoft Windows 10 | =1903 | |
Microsoft Windows Server 2016 | ||
Microsoft Windows Server 2019 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2019-0990 has a severity rating of important according to Microsoft's security guidelines.
To fix CVE-2019-0990, it is recommended to apply the latest security updates provided by Microsoft for affected products.
CVE-2019-0990 affects the Microsoft Edge browser and Microsoft ChakraCore prior to version 1.11.10.
CVE-2019-0990 is classified as an information disclosure vulnerability related to the handling of objects in memory.
As of now, there are no publicly known exploits specifically targeting CVE-2019-0990.