First published: Tue Nov 12 2019(Updated: )
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge (HTML-based), aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1426, CVE-2019-1428, CVE-2019-1429.
Credit: secure@microsoft.com
Affected Software | Affected Version | How to fix |
---|---|---|
Microsoft Edge | ||
Microsoft Windows 10 | =1809 | |
Microsoft Windows 10 | =1903 | |
Microsoft Windows Server 2019 | ||
Microsoft ChakraCore | <1.11.15 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2019-1427 is a remote code execution vulnerability in Microsoft Edge (HTML-based) and Microsoft ChakraCore scripting engine, which allows an attacker to execute arbitrary code on a target system.
CVE-2019-1427 affects Microsoft Edge by allowing an attacker to execute arbitrary code in the context of the current user.
To fix CVE-2019-1427, Microsoft has released a security update. It is recommended to apply the latest security patches to protect your system.
CVE-2019-1427 has a severity rating of 7.5 (High).
Yes, Microsoft ChakraCore version up to 1.11.15 is affected by CVE-2019-1427.