First published: Wed Jun 12 2019(Updated: )
A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0920, CVE-2019-0988, CVE-2019-1005, CVE-2019-1055.
Credit: secure@microsoft.com
Affected Software | Affected Version | How to fix |
---|---|---|
Internet Explorer | =9 | |
Microsoft Windows Server | =sp2 | |
Internet Explorer | =10 | |
Microsoft Windows Server | ||
Internet Explorer | =11 | |
Microsoft Windows 10 | ||
Microsoft Windows 10 | =1607 | |
Microsoft Windows 10 | =1703 | |
Microsoft Windows 10 | =1709 | |
Microsoft Windows 10 | =1803 | |
Microsoft Windows 10 | =1809 | |
Microsoft Windows 10 | =1903 | |
Microsoft Windows 7 | =sp1 | |
Microsoft Windows 8.1 | ||
Microsoft Windows RT | ||
Microsoft Windows Server | =r2-sp1 | |
Microsoft Windows Server | =r2 | |
Microsoft Windows Server 2016 | ||
Microsoft Windows Server 2019 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2019-1080 has a severity rating of critical due to its potential for remote code execution.
To fix CVE-2019-1080, you should apply the Microsoft security updates released for Internet Explorer.
CVE-2019-1080 affects Internet Explorer versions 9, 10, and 11.
Yes, CVE-2019-1080 can be exploited remotely if a user opens a specially crafted web page.
CVE-2019-1080 is a scripting engine memory corruption vulnerability that can lead to remote code execution.