CVE-2019-1298
First published: Wed Sep 11 2019(Updated: )
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1138, CVE-2019-1217, CVE-2019-1237, CVE-2019-1300.
Credit: secure@microsoft.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Microsoft Edge | ||
| Microsoft Windows 10 | =1607 | |
| Microsoft Windows 10 | =1703 | |
| Microsoft Windows 10 | =1709 | |
| Microsoft Windows 10 | =1803 | |
| Microsoft Windows 10 | =1809 | |
| Microsoft Windows 10 | =1903 | |
| Microsoft Windows Server 2016 | ||
| Microsoft Windows Server 2019 | ||
| Microsoft ChakraCore | <1.11.13 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is CVE-2019-1298?
CVE-2019-1298 is a remote code execution vulnerability in the Chakra scripting engine in Microsoft Edge.
How does CVE-2019-1298 impact Microsoft Edge?
CVE-2019-1298 allows an attacker to execute arbitrary code in the context of the current user.
How severe is CVE-2019-1298?
CVE-2019-1298 has a severity rating of 7.5 out of 10, indicating a high severity vulnerability.
Which versions of Microsoft Edge are affected by CVE-2019-1298?
CVE-2019-1298 affects all versions of Microsoft Edge.
How can I fix CVE-2019-1298?
To fix CVE-2019-1298, update Microsoft Edge to the latest version provided by Microsoft.
- agent/type
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/remedy
- agent/severity
- agent/weakness
- agent/author
- agent/tags
- agent/description
- agent/references
- agent/event
- collector/mitre-cve
- source/MITRE
- vendor/microsoft
- canonical/microsoft edge
- canonical/microsoft windows 10
- version/microsoft windows 10/1607
- version/microsoft windows 10/1703
- version/microsoft windows 10/1709
- version/microsoft windows 10/1803
- version/microsoft windows 10/1809
- version/microsoft windows 10/1903
- canonical/microsoft windows server 2016
- canonical/microsoft windows server 2019
- canonical/microsoft chakracore