First published: Wed Jun 12 2019(Updated: )
An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory in Microsoft Edge, aka 'Scripting Engine Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0990.
Credit: secure@microsoft.com
Affected Software | Affected Version | How to fix |
---|---|---|
Microsoft Chakra | <1.11.10 | |
Microsoft Edge Beta | ||
Microsoft Windows 10 | ||
Microsoft Windows 10 | =1607 | |
Microsoft Windows 10 | =1703 | |
Microsoft Windows 10 | =1709 | |
Microsoft Windows 10 | =1803 | |
Microsoft Windows 10 | =1809 | |
Microsoft Windows 10 | =1903 | |
Microsoft Windows Server 2016 | ||
Microsoft Windows Server 2019 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2019-1023 has a severity rating of 'Medium'.
To fix CVE-2019-1023, you should update Microsoft Edge to the latest version.
CVE-2019-1023 affects Microsoft Edge and the Microsoft ChakraCore prior to version 1.11.10.
If exploited, CVE-2019-1023 can result in information disclosure from the affected system.
CVE-2019-1023 is not specific to any version of Windows, as it primarily affects Microsoft Edge.