CVE-2019-1138
First published: Wed Sep 11 2019(Updated: )
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1217, CVE-2019-1237, CVE-2019-1298, CVE-2019-1300.
Credit: secure@microsoft.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Microsoft Edge | ||
| Microsoft Windows 10 | =1607 | |
| Microsoft Windows 10 | =1703 | |
| Microsoft Windows 10 | =1709 | |
| Microsoft Windows 10 | =1803 | |
| Microsoft Windows 10 | =1809 | |
| Microsoft Windows 10 | =1903 | |
| Microsoft Windows Server 2016 | ||
| Microsoft Windows Server 2019 | ||
| Microsoft ChakraCore | <1.11.13 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is CVE-2019-1138?
CVE-2019-1138 is a remote code execution vulnerability in the Chakra scripting engine in Microsoft Edge.
How does CVE-2019-1138 affect Microsoft Edge?
CVE-2019-1138 affects all versions of Microsoft Edge.
What is the severity of CVE-2019-1138?
CVE-2019-1138 has a severity rating of 7.5 out of 10, which is considered high.
How can I mitigate CVE-2019-1138?
Apply the necessary security updates provided by Microsoft to fix CVE-2019-1138.
Where can I find more information about CVE-2019-1138?
You can find more information about CVE-2019-1138 on the Microsoft Security Guidance Advisory page: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1138.
- agent/type
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/remedy
- agent/severity
- agent/weakness
- agent/author
- agent/tags
- agent/description
- agent/references
- agent/event
- collector/mitre-cve
- source/MITRE
- vendor/microsoft
- canonical/microsoft edge
- canonical/microsoft windows 10
- version/microsoft windows 10/1607
- version/microsoft windows 10/1703
- version/microsoft windows 10/1709
- version/microsoft windows 10/1803
- version/microsoft windows 10/1809
- version/microsoft windows 10/1903
- canonical/microsoft windows server 2016
- canonical/microsoft windows server 2019
- canonical/microsoft chakracore