VDB

CVE-2019-1001

CVE-2019-1001 PUBLISHED CVSS 7.5 HIGH

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1004, CVE-2019-1056, CVE-2019-1059.

EPSS 4.06% · 88.7th percentile

Risk Scores

CVSS 3.0
7.5
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
4.06%
88.7th percentile

Affected Products

VendorProductVersions
MicrosoftInternet Explorer 11 on Windows Server 2012*
MicrosoftInternet Explorer 11 on Windows 10 Version 1903 for ARM64-based Systemsunspecified
MicrosoftMicrosoft Edge*, *, *
MicrosoftMicrosoft Edge on Windows 10 Version 1903 for 32-bit Systemsunspecified
MicrosoftMicrosoft Edge on Windows 10 Version 1903 for x64-based Systemsunspecified
microsoftinternet_explorer11
MicrosoftMicrosoft Edge on Windows 10 Version 1903 for ARM64-based Systems*
MicrosoftChakraCore*
microsoftchakracore0
MicrosoftInternet Explorer 11*, Windows 7 for 32-bit Systems Service Pack 1, Windows 7 for x64-based Systems Service Pack 1
MicrosoftInternet Explorer 11 on Windows 10 Version 1903 for 32-bit Systemsunspecified
MicrosoftInternet Explorer 11 on Windows 10 Version 1903 for x64-based Systems*
microsoftedge

Timeline

  • Jul 10, 2019 CVE Published
  • Apr 14, 2021 EPSS Score
  • Jun 23, 2021 EPSS Score
  • Oct 26, 2021 EPSS Score
  • Dec 27, 2021 EPSS Score
  • Feb 4, 2022 EPSS Score
  • Feb 28, 2022 EPSS Score
  • Apr 1, 2022 EPSS Score
  • May 1, 2022 EPSS Score
  • Sep 4, 2022 EPSS Score
  • Nov 6, 2022 EPSS Score
  • Jan 8, 2023 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›