Anusha64/LoanDataSet huggingface dataset:
Explain CVE-2019-0573
An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations, aka "Windows Data Sharing Service Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows Server 2019, Windows 10 Servers. This CVE ID is unique from CVE-2019-0571, CVE-2019-0572, CVE-2019-0574.
Affected Products: Windows Server 2016
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0573'}, {'name': '106430', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106430'}, {'name': '46158', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/46158/'}]
CVE State: PUBLISHED
Explain CVE-2019-0574
An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations, aka "Windows Data Sharing Service Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows Server 2019, Windows 10 Servers. This CVE ID is unique from CVE-2019-0571, CVE-2019-0572, CVE-2019-0573.
Affected Products: Windows Server 2016
References: [{'name': '106431', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106431'}, {'name': '46160', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/46160/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0574'}]
CVE State: PUBLISHED
Explain CVE-2019-0575
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database Engine Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2019-0538, CVE-2019-0576, CVE-2019-0577, CVE-2019-0578, CVE-2019-0579, CVE-2019-0580, CVE-2019-0581, CVE-2019-0582, CVE-2019-0583, CVE-2019-0584.
Affected Products: Windows 7
References: [{'name': '106404', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106404'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0575'}]
CVE State: PUBLISHED
Explain CVE-2019-0576
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database Engine Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2019-0538, CVE-2019-0575, CVE-2019-0577, CVE-2019-0578, CVE-2019-0579, CVE-2019-0580, CVE-2019-0581, CVE-2019-0582, CVE-2019-0583, CVE-2019-0584.
Affected Products: Windows 7
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0576'}, {'name': '106422', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106422'}]
CVE State: PUBLISHED
Explain CVE-2019-0577
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database Engine Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2019-0538, CVE-2019-0575, CVE-2019-0576, CVE-2019-0578, CVE-2019-0579, CVE-2019-0580, CVE-2019-0581, CVE-2019-0582, CVE-2019-0583, CVE-2019-0584.
Affected Products: Windows 7
References: [{'name': '106423', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106423'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0577'}]
CVE State: PUBLISHED
Explain CVE-2019-0578
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database Engine Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2019-0538, CVE-2019-0575, CVE-2019-0576, CVE-2019-0577, CVE-2019-0579, CVE-2019-0580, CVE-2019-0581, CVE-2019-0582, CVE-2019-0583, CVE-2019-0584.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0578'}, {'name': '106424', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106424'}]
CVE State: PUBLISHED
Explain CVE-2019-0579
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database Engine Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2019-0538, CVE-2019-0575, CVE-2019-0576, CVE-2019-0577, CVE-2019-0578, CVE-2019-0580, CVE-2019-0581, CVE-2019-0582, CVE-2019-0583, CVE-2019-0584.
Affected Products: Windows 7
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0579'}, {'name': '106425', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106425'}]
CVE State: PUBLISHED
Explain CVE-2019-0580
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database Engine Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2019-0538, CVE-2019-0575, CVE-2019-0576, CVE-2019-0577, CVE-2019-0578, CVE-2019-0579, CVE-2019-0581, CVE-2019-0582, CVE-2019-0583, CVE-2019-0584.
Affected Products: Windows 7
References: [{'name': '106429', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106429'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0580'}]
CVE State: PUBLISHED
Explain CVE-2019-0581
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database Engine Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2019-0538, CVE-2019-0575, CVE-2019-0576, CVE-2019-0577, CVE-2019-0578, CVE-2019-0579, CVE-2019-0580, CVE-2019-0582, CVE-2019-0583, CVE-2019-0584.
Affected Products: Windows 7
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0581'}, {'name': '106432', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106432'}]
CVE State: PUBLISHED
Explain CVE-2019-0582
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database Engine Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2019-0538, CVE-2019-0575, CVE-2019-0576, CVE-2019-0577, CVE-2019-0578, CVE-2019-0579, CVE-2019-0580, CVE-2019-0581, CVE-2019-0583, CVE-2019-0584.
Affected Products: Windows 7
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0582'}, {'name': '106433', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106433'}]
CVE State: PUBLISHED
Explain CVE-2019-0583
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database Engine Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2019-0538, CVE-2019-0575, CVE-2019-0576, CVE-2019-0577, CVE-2019-0578, CVE-2019-0579, CVE-2019-0580, CVE-2019-0581, CVE-2019-0582, CVE-2019-0584.
Affected Products: Windows 7
References: [{'name': '106435', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106435'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0583'}]
CVE State: PUBLISHED
Explain CVE-2019-0584
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database Engine Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2019-0538, CVE-2019-0575, CVE-2019-0576, CVE-2019-0577, CVE-2019-0578, CVE-2019-0579, CVE-2019-0580, CVE-2019-0581, CVE-2019-0582, CVE-2019-0583.
Affected Products: Windows 7
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0584'}, {'name': '106436', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106436'}]
CVE State: PUBLISHED
Explain CVE-2019-0585
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka "Microsoft Word Remote Code Execution Vulnerability." This affects Word, Microsoft Office, Microsoft Office Word Viewer, Office 365 ProPlus, Microsoft SharePoint, Microsoft Office Online Server, Microsoft Word, Microsoft SharePoint Server.
Affected Products: Word
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0585'}, {'name': '106392', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106392'}]
CVE State: PUBLISHED
Explain CVE-2019-0586
A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka "Microsoft Exchange Memory Corruption Vulnerability." This affects Microsoft Exchange Server.
Affected Products: Microsoft Exchange Server
References: [{'name': '106421', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106421'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0586'}]
CVE State: PUBLISHED
Explain CVE-2019-0588
An information disclosure vulnerability exists when the Microsoft Exchange PowerShell API grants calendar contributors more view permissions than intended, aka "Microsoft Exchange Information Disclosure Vulnerability." This affects Microsoft Exchange Server.
Affected Products: Microsoft Exchange Server
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0588'}, {'name': '106437', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106437'}]
CVE State: PUBLISHED
Explain CVE-2019-0590
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0591, CVE-2019-0593, CVE-2019-0605, CVE-2019-0607, CVE-2019-0610, CVE-2019-0640, CVE-2019-0642, CVE-2019-0644, CVE-2019-0651, CVE-2019-0652, CVE-2019-0655.
Affected Products: Microsoft Edge
References: [{'name': '106934', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106934'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0590'}]
CVE State: PUBLISHED
Explain CVE-2019-0591
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0590, CVE-2019-0593, CVE-2019-0605, CVE-2019-0607, CVE-2019-0610, CVE-2019-0640, CVE-2019-0642, CVE-2019-0644, CVE-2019-0651, CVE-2019-0652, CVE-2019-0655.
Affected Products: Microsoft Edge
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0591'}, {'name': '106935', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106935'}]
CVE State: PUBLISHED
Explain CVE-2019-0592
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0611.
Affected Products: Microsoft Edge
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0592'}]
CVE State: PUBLISHED
Explain CVE-2019-0593
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0590, CVE-2019-0591, CVE-2019-0605, CVE-2019-0607, CVE-2019-0610, CVE-2019-0640, CVE-2019-0642, CVE-2019-0644, CVE-2019-0651, CVE-2019-0652, CVE-2019-0655.
Affected Products: Microsoft Edge
References: [{'name': '106936', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106936'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0593'}]
CVE State: PUBLISHED
Explain CVE-2019-0594
A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0604.
Affected Products: Microsoft SharePoint Server
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0594'}, {'name': '106866', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106866'}]
CVE State: PUBLISHED
Explain CVE-2019-0595
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0596, CVE-2019-0597, CVE-2019-0598, CVE-2019-0599, CVE-2019-0625.
Affected Products: Windows
References: [{'name': '106921', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106921'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0595'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://kc.mcafee.com/corporate/index?page=content&id=SB10289'}]
CVE State: PUBLISHED
Explain CVE-2019-0596
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0595, CVE-2019-0597, CVE-2019-0598, CVE-2019-0599, CVE-2019-0625.
Affected Products: Windows
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0596'}, {'name': '106922', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106922'}]
CVE State: PUBLISHED
Explain CVE-2019-0597
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0595, CVE-2019-0596, CVE-2019-0598, CVE-2019-0599, CVE-2019-0625.
Affected Products: Windows
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0597'}, {'name': '106923', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106923'}]
CVE State: PUBLISHED
Explain CVE-2019-0598
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0595, CVE-2019-0596, CVE-2019-0597, CVE-2019-0599, CVE-2019-0625.
Affected Products: Windows
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0598'}, {'name': '106924', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106924'}]
CVE State: PUBLISHED
Explain CVE-2019-0599
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0595, CVE-2019-0596, CVE-2019-0597, CVE-2019-0598, CVE-2019-0625.
Affected Products: Windows
References: [{'name': '106925', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106925'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0599'}]
CVE State: PUBLISHED
Explain CVE-2019-0600
An information disclosure vulnerability exists when the Human Interface Devices (HID) component improperly handles objects in memory, aka 'HID Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0601.
Affected Products: Windows
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0600'}, {'name': '106868', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106868'}]
CVE State: PUBLISHED
Explain CVE-2019-0601
An information disclosure vulnerability exists when the Human Interface Devices (HID) component improperly handles objects in memory, aka 'HID Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0600.
Affected Products: Windows
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0601'}, {'name': '106883', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106883'}]
CVE State: PUBLISHED
Explain CVE-2019-0602
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0615, CVE-2019-0616, CVE-2019-0619, CVE-2019-0660, CVE-2019-0664.
Affected Products: Windows
References: [{'name': '106858', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106858'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0602'}]
CVE State: PUBLISHED
Explain CVE-2019-0603
A remote code execution vulnerability exists in the way that Windows Deployment Services TFTP Server handles objects in memory. An attacker who successfully exploited the vulnerability could execute arbitrary code with elevated permissions on a target system. To exploit the vulnerability, an attacker could create a specially crafted request, causing Windows to execute arbitrary code with elevated permissions. The security update addresses the vulnerability by correcting how Windows Deployment Services TFTP Server handles objects in memory, aka 'Windows Deployment Services TFTP Server Remote Code Execution Vulnerability'.
Affected Products: Windows
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0603'}]
CVE State: PUBLISHED
Explain CVE-2019-0604
A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0594.
Affected Products: Microsoft SharePoint Server
References: [{'name': '106914', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106914'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0604'}]
CVE State: PUBLISHED
Explain CVE-2019-0605
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0590, CVE-2019-0591, CVE-2019-0593, CVE-2019-0607, CVE-2019-0610, CVE-2019-0640, CVE-2019-0642, CVE-2019-0644, CVE-2019-0651, CVE-2019-0652, CVE-2019-0655.
Affected Products: Microsoft Edge
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0605'}, {'name': '106905', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106905'}]
CVE State: PUBLISHED
Explain CVE-2019-0606
A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka 'Internet Explorer Memory Corruption Vulnerability'.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0606'}, {'name': '106859', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106859'}]
CVE State: PUBLISHED
Explain CVE-2019-0607
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0590, CVE-2019-0591, CVE-2019-0593, CVE-2019-0605, CVE-2019-0610, CVE-2019-0640, CVE-2019-0642, CVE-2019-0644, CVE-2019-0651, CVE-2019-0652, CVE-2019-0655.
Affected Products: Microsoft Edge
References: [{'name': '106907', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106907'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0607'}]
CVE State: PUBLISHED
Explain CVE-2019-0608
A spoofing vulnerability exists when Microsoft Browsers does not properly parse HTTP content, aka 'Microsoft Browser Spoofing Vulnerability'. This CVE ID is unique from CVE-2019-1357.
Affected Products: Internet Explorer 9
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0608'}]
CVE State: PUBLISHED
Explain CVE-2019-0609
A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0639, CVE-2019-0680, CVE-2019-0769, CVE-2019-0770, CVE-2019-0771, CVE-2019-0773, CVE-2019-0783.
Affected Products: Internet Explorer 11
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0609'}]
CVE State: PUBLISHED
Explain CVE-2019-0610
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0590, CVE-2019-0591, CVE-2019-0593, CVE-2019-0605, CVE-2019-0607, CVE-2019-0640, CVE-2019-0642, CVE-2019-0644, CVE-2019-0651, CVE-2019-0652, CVE-2019-0655.
Affected Products: Microsoft Edge
References: [{'name': '106908', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106908'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0610'}]
CVE State: PUBLISHED
Explain CVE-2019-0611
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0592.
Affected Products: Microsoft Edge
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0611'}]
CVE State: PUBLISHED
Explain CVE-2019-0612
A security feature bypass vulnerability exists when Click2Play protection in Microsoft Edge improperly handles flash objects. By itself, this bypass vulnerability does not allow arbitrary code execution, aka 'Microsoft Edge Security Feature Bypass Vulnerability'.
Affected Products: Microsoft Edge
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0612'}]
CVE State: PUBLISHED
Explain CVE-2019-0613
A remote code execution vulnerability exists in .NET Framework and Visual Studio software when the software fails to check the source markup of a file.An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user, aka '.NET Framework and Visual Studio Remote Code Execution Vulnerability'.
Affected Products: Microsoft .NET Framework 4.5.2
References: [{'name': '106872', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106872'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0613'}]
CVE State: PUBLISHED
Explain CVE-2019-0614
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0774.
Affected Products: Windows
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0614'}]
CVE State: PUBLISHED
Explain CVE-2019-0615
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0602, CVE-2019-0616, CVE-2019-0619, CVE-2019-0660, CVE-2019-0664.
Affected Products: Windows
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0615'}, {'name': '106860', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106860'}]
CVE State: PUBLISHED
Explain CVE-2019-0616
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0602, CVE-2019-0615, CVE-2019-0619, CVE-2019-0660, CVE-2019-0664.
Affected Products: Windows
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0616'}, {'name': '106867', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106867'}]
CVE State: PUBLISHED
Explain CVE-2019-0617
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'.
Affected Products: Windows
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0617'}]
CVE State: PUBLISHED
Explain CVE-2019-0618
A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0662.
Affected Products: Windows
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0618'}, {'name': '106878', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106878'}]
CVE State: PUBLISHED
Explain CVE-2019-0619
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0602, CVE-2019-0615, CVE-2019-0616, CVE-2019-0660, CVE-2019-0664.
Affected Products: Windows
References: [{'name': '106864', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106864'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0619'}]
CVE State: PUBLISHED
Explain CVE-2019-0620
A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Windows Hyper-V Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0709, CVE-2019-0722.
Affected Products: Windows Server
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0620'}]
CVE State: PUBLISHED
Explain CVE-2019-0621
An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0661, CVE-2019-0663.
Affected Products: Windows
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0621'}, {'name': '106873', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106873'}]
CVE State: PUBLISHED
Explain CVE-2019-0622
An elevation of privilege vulnerability exists when Skype for Andriod fails to properly handle specific authentication requests, aka "Skype for Android Elevation of Privilege Vulnerability." This affects Skype 8.35.
Affected Products: Skype
References: [{'name': '106465', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106465'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0622'}]
CVE State: PUBLISHED
Explain CVE-2019-0623
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'.
Affected Products: Windows
References: [{'name': '106891', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106891'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0623'}]
CVE State: PUBLISHED
Explain CVE-2019-0624
A spoofing vulnerability exists when a Skype for Business 2015 server does not properly sanitize a specially crafted request, aka "Skype for Business 2015 Spoofing Vulnerability." This affects Skype.
Affected Products: Skype
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0624'}, {'name': '106663', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106663'}]
CVE State: PUBLISHED
Explain CVE-2019-0625
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0595, CVE-2019-0596, CVE-2019-0597, CVE-2019-0598, CVE-2019-0599.
Affected Products: Windows
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0625'}, {'name': '106926', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106926'}]
CVE State: PUBLISHED
Explain CVE-2019-0626
A memory corruption vulnerability exists in the Windows Server DHCP service when an attacker sends specially crafted packets to a DHCP server, aka 'Windows DHCP Server Remote Code Execution Vulnerability'.
Affected Products: Windows
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0626'}, {'name': '106887', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106887'}]
CVE State: PUBLISHED
Explain CVE-2019-0627
A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard, aka 'Windows Security Feature Bypass Vulnerability'. This CVE ID is unique from CVE-2019-0631, CVE-2019-0632.
Affected Products: Windows
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0627'}, {'name': '106857', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106857'}]
CVE State: PUBLISHED
Explain CVE-2019-0628
An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerability'.
Affected Products: Windows
References: [{'name': '106893', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106893'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0628'}]
CVE State: PUBLISHED
Explain CVE-2019-0630
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 2.0 (SMBv2) server handles certain requests, aka 'Windows SMB Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0633.
Affected Products: Windows
References: [{'name': '106876', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106876'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0630'}]
CVE State: PUBLISHED
Explain CVE-2019-0631
A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard, aka 'Windows Security Feature Bypass Vulnerability'. This CVE ID is unique from CVE-2019-0627, CVE-2019-0632.
Affected Products: Windows
References: [{'name': '106875', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106875'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0631'}]
CVE State: PUBLISHED
Explain CVE-2019-0632
A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard, aka 'Windows Security Feature Bypass Vulnerability'. This CVE ID is unique from CVE-2019-0627, CVE-2019-0631.
Affected Products: Windows
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0632'}, {'name': '106880', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106880'}]
CVE State: PUBLISHED
Explain CVE-2019-0633
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 2.0 (SMBv2) server handles certain requests, aka 'Windows SMB Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0630.
Affected Products: Windows Server
References: [{'name': '106916', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106916'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0633'}]
CVE State: PUBLISHED
Explain CVE-2019-0634
A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka 'Microsoft Edge Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0645, CVE-2019-0650.
Affected Products: Microsoft Edge
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0634'}, {'name': '106899', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106899'}]
CVE State: PUBLISHED
Explain CVE-2019-0635
An information disclosure vulnerability exists when Windows Hyper-V on a host operating system fails to properly validate input from an authenticated user on a guest operating system, aka 'Windows Hyper-V Information Disclosure Vulnerability'.
Affected Products: Windows
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0635'}, {'name': '106884', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106884'}]
CVE State: PUBLISHED
Explain CVE-2019-0636
An information vulnerability exists when Windows improperly discloses file information, aka 'Windows Information Disclosure Vulnerability'.
Affected Products: Windows
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0636'}, {'name': '106895', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106895'}]
CVE State: PUBLISHED
Explain CVE-2019-0637
A security feature bypass vulnerability exists when Windows Defender Firewall incorrectly applies firewall profiles to cellular network connections, aka 'Windows Defender Firewall Security Feature Bypass Vulnerability'.
Affected Products: Windows
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0637'}, {'name': '106879', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106879'}]
CVE State: PUBLISHED
Explain CVE-2019-0639
A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0609, CVE-2019-0680, CVE-2019-0769, CVE-2019-0770, CVE-2019-0771, CVE-2019-0773, CVE-2019-0783.
Affected Products: Microsoft Edge
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0639'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.zerodayinitiative.com/advisories/ZDI-20-122/'}]
CVE State: PUBLISHED
Explain CVE-2019-0640
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0590, CVE-2019-0591, CVE-2019-0593, CVE-2019-0605, CVE-2019-0607, CVE-2019-0610, CVE-2019-0642, CVE-2019-0644, CVE-2019-0651, CVE-2019-0652, CVE-2019-0655.
Affected Products: Microsoft Edge
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0640'}, {'name': '106910', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106910'}]
CVE State: PUBLISHED
Explain CVE-2019-0641
A security feature bypass vulnerability exists in Microsoft Edge handles whitelisting, aka 'Microsoft Edge Security Feature Bypass Vulnerability'.
Affected Products: Microsoft Edge
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0641'}, {'name': '106871', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106871'}]
CVE State: PUBLISHED
Explain CVE-2019-0642
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0590, CVE-2019-0591, CVE-2019-0593, CVE-2019-0605, CVE-2019-0607, CVE-2019-0610, CVE-2019-0640, CVE-2019-0644, CVE-2019-0651, CVE-2019-0652, CVE-2019-0655.
Affected Products: Microsoft Edge
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0642'}, {'name': '106911', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106911'}]
CVE State: PUBLISHED
Explain CVE-2019-0643
An information disclosure vulnerability exists in the way that Microsoft Edge handles cross-origin requests, aka 'Microsoft Edge Information Disclosure Vulnerability'.
Affected Products: Microsoft Edge
References: [{'name': '106874', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106874'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0643'}]
CVE State: PUBLISHED
Explain CVE-2019-0644
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0590, CVE-2019-0591, CVE-2019-0593, CVE-2019-0605, CVE-2019-0607, CVE-2019-0610, CVE-2019-0640, CVE-2019-0642, CVE-2019-0651, CVE-2019-0652, CVE-2019-0655.
Affected Products: Microsoft Edge
References: [{'name': '106889', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106889'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0644'}]
CVE State: PUBLISHED
Explain CVE-2019-0645
A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka 'Microsoft Edge Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0634, CVE-2019-0650.
Affected Products: Microsoft Edge
References: [{'name': '106896', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106896'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0645'}]
CVE State: PUBLISHED
Explain CVE-2019-0646
A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka "Team Foundation Server Cross-site Scripting Vulnerability." This affects Team.
Affected Products: Team
References: [{'name': '106651', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106651'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0646'}]
CVE State: PUBLISHED
Explain CVE-2019-0647
An information disclosure vulnerability exists when Team Foundation Server does not properly handle variables marked as secret, aka "Team Foundation Server Information Disclosure Vulnerability." This affects Team.
Affected Products: Team
References: [{'name': '106650', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106650'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0647'}]
CVE State: PUBLISHED
Explain CVE-2019-0648
An information disclosure vulnerability exists when Chakra improperly discloses the contents of its memory, which could provide an attacker with information to further compromise the user's computer or data.To exploit the vulnerability, an attacker must know the memory address of where the object was created.The update addresses the vulnerability by changing the way certain functions handle objects in memory, aka Scripting Engine Information Disclosure Vulnerability. This CVE ID is unique from CVE-2019-0658.
Affected Products: Microsoft Edge
References: [{'name': '106885', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106885'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0648'}]
CVE State: PUBLISHED
Explain CVE-2019-0649
A vulnerability exists in Microsoft Chakra JIT server, aka 'Scripting Engine Elevation of Privileged Vulnerability'.
Affected Products: Microsoft Edge
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0649'}, {'name': '106877', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106877'}]
CVE State: PUBLISHED
Explain CVE-2019-0650
A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka 'Microsoft Edge Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0634, CVE-2019-0645.
Affected Products: Microsoft Edge
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0650'}, {'name': '106901', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106901'}]
CVE State: PUBLISHED
Explain CVE-2019-0651
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0590, CVE-2019-0591, CVE-2019-0593, CVE-2019-0605, CVE-2019-0607, CVE-2019-0610, CVE-2019-0640, CVE-2019-0642, CVE-2019-0644, CVE-2019-0652, CVE-2019-0655.
Affected Products: Microsoft Edge
References: [{'name': '106902', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106902'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0651'}]
CVE State: PUBLISHED
Explain CVE-2019-0652
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0590, CVE-2019-0591, CVE-2019-0593, CVE-2019-0605, CVE-2019-0607, CVE-2019-0610, CVE-2019-0640, CVE-2019-0642, CVE-2019-0644, CVE-2019-0651, CVE-2019-0655.
Affected Products: Microsoft Edge
References: [{'name': '106903', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106903'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0652'}]
CVE State: PUBLISHED
Explain CVE-2019-0654
A spoofing vulnerability exists when Microsoft browsers improperly handles specific redirects, aka 'Microsoft Browser Spoofing Vulnerability'.
Affected Products: Internet Explorer 9
References: [{'name': '106881', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106881'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0654'}]
CVE State: PUBLISHED
Explain CVE-2019-0655
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0590, CVE-2019-0591, CVE-2019-0593, CVE-2019-0605, CVE-2019-0607, CVE-2019-0610, CVE-2019-0640, CVE-2019-0642, CVE-2019-0644, CVE-2019-0651, CVE-2019-0652.
Affected Products: Microsoft Edge
References: [{'name': '106912', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106912'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0655'}]
CVE State: PUBLISHED