First published: Thu Oct 10 2019(Updated: )
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1308, CVE-2019-1335, CVE-2019-1366.
Credit: secure@microsoft.com
Affected Software | Affected Version | How to fix |
---|---|---|
Microsoft ChakraCore | <1.11.14 | |
Microsoft Edge | ||
Microsoft Windows 10 | ||
Microsoft Windows 10 | =1607 | |
Microsoft Windows 10 | =1703 | |
Microsoft Windows 10 | =1709 | |
Microsoft Windows 10 | =1803 | |
Microsoft Windows 10 | =1809 | |
Microsoft Windows 10 | =1903 | |
Microsoft Windows Server 2016 | ||
Microsoft Windows Server 2019 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2019-1307 is a remote code execution vulnerability in the Chakra scripting engine in Microsoft Edge.
The vulnerability allows remote code execution in Microsoft Edge.
CVE-2019-1307 has a severity rating of 7.5 (high).
No, Windows 10 is not affected by CVE-2019-1307.
To fix the vulnerability, it is recommended to update Microsoft Edge to the latest version available.