deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2019-5512
Published: 2019-04-09
Description: VMware Workstation (15.x before 15.0.3, 14.x before 14.1.6) running on Windows does not handle COM classes appropriately. Successful exploitation of this issue may allow hijacking of COM classes used by the VMX process, on a Windows host, leading to elevation of privilege.
CVSS Score: 8.8 (HIGH)
References: https://www.vmware.com/security/advisories/VMSA-2019-0002.html; https://www.vmware.com/security/advisories/VMSA-2019-0002.html
CVE: CVE-2019-5513
Published: 2019-04-09
Description: VMware Horizon Connection Server (7.x before 7.8, 7.5.x before 7.5.2, 6.x before 6.2.8) contains an information disclosure vulnerability. Successful exploitation of this issue may allow disclosure of internal domain names, the Connection Server’s internal name, or the gateway’s internal IP address.
CVSS Score: 5.3 (MEDIUM)
References: https://www.vmware.com/security/advisories/VMSA-2019-0003.html; https://www.vmware.com/security/advisories/VMSA-2019-0003.html
CVE: CVE-2019-7358
Published: 2019-04-09
Description: An exploitable heap overflow vulnerability in the DXF-parsing functionality in Autodesk Advance Steel 2018, Autodesk AutoCAD 2018, Autodesk AutoCAD Architecture 2018, Autodesk AutoCAD Electrical 2018, Autodesk AutoCAD Map 3D 2018, Autodesk AutoCAD Mechanical 2018, Autodesk AutoCAD MEP 2018, Autodesk AutoCAD P&ID 2018, Autodesk AutoCAD Plant 3D 2018, Autodesk AutoCAD LT 2018, and Autodesk Civil 3D 2018. A specially crafted DXF file may cause a heap overflow, resulting in code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://www.autodesk.com/trust/security-advisories/adsk-sa-2019-0001; https://www.autodesk.com/trust/security-advisories/adsk-sa-2019-0001
CVE: CVE-2019-7359
Published: 2019-04-09
Description: An exploitable heap overflow vulnerability in the AcCellMargin handling code in Autodesk Advance Steel 2018, Autodesk AutoCAD 2018, Autodesk AutoCAD Architecture 2018, Autodesk AutoCAD Electrical 2018, Autodesk AutoCAD Map 3D 2018, Autodesk AutoCAD Mechanical 2018, Autodesk AutoCAD MEP 2018, Autodesk AutoCAD P&ID 2018, Autodesk AutoCAD Plant 3D 2018, Autodesk AutoCAD LT 2018, and Autodesk Civil 3D 2018. A specially crafted DXF file with too many cell margins populating an AcCellMargin object may cause a heap overflow, resulting in code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://www.autodesk.com/trust/security-advisories/adsk-sa-2019-0001; https://www.autodesk.com/trust/security-advisories/adsk-sa-2019-0001
CVE: CVE-2019-7360
Published: 2019-04-09
Description: An exploitable use-after-free vulnerability in the DXF-parsing functionality in Autodesk Advance Steel 2018, Autodesk AutoCAD 2018, Autodesk AutoCAD Architecture 2018, Autodesk AutoCAD Electrical 2018, Autodesk AutoCAD Map 3D 2018, Autodesk AutoCAD Mechanical 2018, Autodesk AutoCAD MEP 2018, Autodesk AutoCAD P&ID 2018, Autodesk AutoCAD Plant 3D 2018, Autodesk AutoCAD LT 2018, and Autodesk Civil 3D 2018. A specially crafted DXF file may trigger a use-after-free, resulting in code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://www.autodesk.com/trust/security-advisories/adsk-sa-2019-0001; https://www.autodesk.com/trust/security-advisories/adsk-sa-2019-0001
CVE: CVE-2019-7361
Published: 2019-04-09
Description: An attacker may convince a victim to open a malicious action micro (.actm) file that has serialized data, which may trigger a code execution in Autodesk Advance Steel 2018, Autodesk AutoCAD 2018, Autodesk AutoCAD Architecture 2018, Autodesk AutoCAD Electrical 2018, Autodesk AutoCAD Map 3D 2018, Autodesk AutoCAD Mechanical 2018, Autodesk AutoCAD MEP 2018, Autodesk AutoCAD P&ID 2018, Autodesk AutoCAD Plant 3D 2018, Autodesk AutoCAD LT 2018, and Autodesk Civil 3D 2018.
CVSS Score: 7.8 (HIGH)
CWE: CWE-502
References: https://www.autodesk.com/trust/security-advisories/adsk-sa-2019-0001; https://www.autodesk.com/trust/security-advisories/adsk-sa-2019-0001
CVE: CVE-2018-1356
Published: 2019-04-09
Description: A reflected Cross-Site-Scripting (XSS) vulnerability in Fortinet FortiSandbox before 3.0 may allow an attacker to execute unauthorized code or commands via the back_url parameter in the file scan component.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/107838; https://fortiguard.com/advisory/FG-IR-18-024; http://www.securityfocus.com/bid/107838
CVE: CVE-2019-0685
Published: 2019-04-09
Description: An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0803, CVE-2019-0859.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0685; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0685
CVE: CVE-2019-0688
Published: 2019-04-09
Description: An information disclosure vulnerability exists when the Windows TCP/IP stack improperly handles fragmented IP packets, aka 'Windows TCP/IP Information Disclosure Vulnerability'.
CVSS Score: 7.5 (HIGH)
CWE: CWE-327
References: http://www.securityfocus.com/bid/107685; https://arxiv.org/pdf/1906.10478.pdf; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0688
CVE: CVE-2019-0730
Published: 2019-04-09
Description: An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver (luafv.sys), aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0731, CVE-2019-0796, CVE-2019-0805, CVE-2019-0836, CVE-2019-0841.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://packetstormsecurity.com/files/152533/Microsoft-Windows-LUAFV-Delayed-Virtualization-MAXIMUM_ACCESS-DesiredAccess-Privilege-Escalation.html; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0730; https://www.exploit-db.com/exploits/46713/
CVE: CVE-2019-0731
Published: 2019-04-09
Description: An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver (luafv.sys), aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0730, CVE-2019-0796, CVE-2019-0805, CVE-2019-0836, CVE-2019-0841.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://packetstormsecurity.com/files/152534/Microsoft-Windows-LUAFV-Delayed-Virtualization-Cross-Process-Handle-Duplication-Privilege-Escalation.html; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0731; https://www.exploit-db.com/exploits/46714/
CVE: CVE-2019-0732
Published: 2019-04-09
Description: A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard when Windows improperly handles calls to the LUAFV driver (luafv.sys), aka 'Windows Security Feature Bypass Vulnerability'.
CVSS Score: 7.8 (HIGH)
CWE: CWE-863
References: http://packetstormsecurity.com/files/152536/Microsoft-Windows-LUAFV-NtSetCachedSigningLevel-Device-Guard-Bypass.html; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0732; https://www.exploit-db.com/exploits/46716/
CVE: CVE-2019-0735
Published: 2019-04-09
Description: An elevation of privilege vulnerability exists when the Windows Client Server Run-Time Subsystem (CSRSS) fails to properly handle objects in memory, aka 'Windows CSRSS Elevation of Privilege Vulnerability'.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: http://packetstormsecurity.com/files/152532/Microsoft-Windows-CSRSS-SxSSrv-Cached-Manifest-Privilege-Escalation.html; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0735; https://www.exploit-db.com/exploits/46712/
CVE: CVE-2019-0739
Published: 2019-04-09
Description: A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0752, CVE-2019-0753, CVE-2019-0862.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/107708; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0739; http://www.securityfocus.com/bid/107708
CVE: CVE-2019-0752
Published: 2019-04-09
Description: A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0739, CVE-2019-0753, CVE-2019-0862.
CVSS Score: 7.5 (HIGH)
CWE: CWE-843, CWE-843
References: http://packetstormsecurity.com/files/153078/Microsoft-Internet-Explorer-Windows-10-1809-17763.316-Memory-Corruption.html; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0752; https://www.zerodayinitiative.com/advisories/ZDI-19-359/
CVE: CVE-2019-0753
Published: 2019-04-09
Description: A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0739, CVE-2019-0752, CVE-2019-0862.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0753; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0753
CVE: CVE-2019-0764
Published: 2019-04-09
Description: A tampering vulnerability exists when Microsoft browsers do not properly validate input under specific conditions, aka 'Microsoft Browsers Tampering Vulnerability'.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-88
References: http://www.securityfocus.com/bid/107731; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0764; http://www.securityfocus.com/bid/107731
CVE: CVE-2019-0786
Published: 2019-04-09
Description: An elevation of privilege vulnerability exists in the Microsoft Server Message Block (SMB) Server when an attacker with valid credentials attempts to open a specially crafted file over the SMB protocol on the same machine, aka 'SMB Server Elevation of Privilege Vulnerability'.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0786; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0786
CVE: CVE-2019-0790
Published: 2019-04-09
Description: A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0791, CVE-2019-0792, CVE-2019-0793, CVE-2019-0795.
CVSS Score: 8.8 (HIGH)
CWE: CWE-611
References: http://www.securityfocus.com/bid/107702; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0790; http://www.securityfocus.com/bid/107702
CVE: CVE-2019-0791
Published: 2019-04-09
Description: A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0790, CVE-2019-0792, CVE-2019-0793, CVE-2019-0795.
CVSS Score: 8.8 (HIGH)
CWE: CWE-611
References: http://www.securityfocus.com/bid/107726; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0791; http://www.securityfocus.com/bid/107726
CVE: CVE-2019-0792
Published: 2019-04-09
Description: A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0790, CVE-2019-0791, CVE-2019-0793, CVE-2019-0795.
CVSS Score: 8.8 (HIGH)
CWE: CWE-611
References: http://www.securityfocus.com/bid/107728; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0792; http://www.securityfocus.com/bid/107728
CVE: CVE-2019-0793
Published: 2019-04-09
Description: A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0790, CVE-2019-0791, CVE-2019-0792, CVE-2019-0795.
CVSS Score: 8.8 (HIGH)
CWE: CWE-611
References: http://www.securityfocus.com/bid/107729; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0793; http://www.securityfocus.com/bid/107729
CVE: CVE-2019-0794
Published: 2019-04-09
Description: A remote code execution vulnerability exists when OLE automation improperly handles objects in memory, aka 'OLE Automation Remote Code Execution Vulnerability'.
CVSS Score: 8.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0794; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0794
CVE: CVE-2019-0795
Published: 2019-04-09
Description: A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0790, CVE-2019-0791, CVE-2019-0792, CVE-2019-0793.
CVSS Score: 8.8 (HIGH)
CWE: CWE-611
References: http://www.securityfocus.com/bid/107732; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0795; http://www.securityfocus.com/bid/107732
CVE: CVE-2019-0796
Published: 2019-04-09
Description: An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver (luafv.sys), aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0730, CVE-2019-0731, CVE-2019-0805, CVE-2019-0836, CVE-2019-0841.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-264
References: http://packetstormsecurity.com/files/152535/Microsoft-Windows-LUAFV-LuafvCopyShortName-Arbitrary-Short-Name-Privilege-Escalation.html; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0796; https://www.exploit-db.com/exploits/46715/
CVE: CVE-2019-0801
Published: 2019-04-09
Description: A remote code execution vulnerability exists when Microsoft Office fails to properly handle certain files.To exploit the vulnerability, an attacker would have to convince a user to open a specially crafted URL file that points to an Excel or PowerPoint file that was also downloaded.The update addresses the vulnerability by correcting how Office handles these files., aka 'Office Remote Code Execution Vulnerability'.
CVSS Score: 7.8 (HIGH)
CWE: CWE-19
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0801; https://www.zerodayinitiative.com/advisories/ZDI-19-358/; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0801
CVE: CVE-2019-0802
Published: 2019-04-09
Description: An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0849.
CVSS Score: 6.5 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0802; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0802
CVE: CVE-2019-0803
Published: 2019-04-09
Description: An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0685, CVE-2019-0859.
CVSS Score: 7.8 (HIGH)
References: http://packetstormsecurity.com/files/153034/Microsoft-Windows-Win32k-Privilege-Escalation.html; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0803; http://packetstormsecurity.com/files/153034/Microsoft-Windows-Win32k-Privilege-Escalation.html
CVE: CVE-2019-0805
Published: 2019-04-09
Description: An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver (luafv.sys), aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0730, CVE-2019-0731, CVE-2019-0796, CVE-2019-0836, CVE-2019-0841.
CVSS Score: 7.8 (HIGH)
CWE: CWE-345
References: http://packetstormsecurity.com/files/152537/Microsoft-Windows-LUAFV-Delayed-Virtualization-Cache-Manager-Poisoning-Privilege-Escalation.html; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0805; https://www.exploit-db.com/exploits/46717/
CVE: CVE-2019-0806
Published: 2019-04-09
Description: A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0810, CVE-2019-0812, CVE-2019-0829, CVE-2019-0860, CVE-2019-0861.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0806; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0806
CVE: CVE-2019-0810
Published: 2019-04-09
Description: A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0806, CVE-2019-0812, CVE-2019-0829, CVE-2019-0860, CVE-2019-0861.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787, CWE-843
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0810; https://www.zerodayinitiative.com/advisories/ZDI-19-361/; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0810
CVE: CVE-2019-0812
Published: 2019-04-09
Description: A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0806, CVE-2019-0810, CVE-2019-0829, CVE-2019-0860, CVE-2019-0861.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0812; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0812
CVE: CVE-2019-0813
Published: 2019-04-09
Description: An elevation of privilege vulnerability exists when Windows Admin Center improperly impersonates operations in certain situations, aka 'Windows Admin Center Elevation of Privilege Vulnerability'.
CVSS Score: 9.8 (CRITICAL)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0813; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0813
CVE: CVE-2019-0814
Published: 2019-04-09
Description: An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0848.
CVSS Score: 5.5 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0814; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0814
CVE: CVE-2019-0815
Published: 2019-04-09
Description: A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka 'ASP.NET Core Denial of Service Vulnerability'.
CVSS Score: 7.5 (HIGH)
CWE: CWE-19
References: http://www.securityfocus.com/bid/107701; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0815; http://www.securityfocus.com/bid/107701
CVE: CVE-2019-0817
Published: 2019-04-09
Description: A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web Access (OWA) fails to properly handle web requests, aka 'Microsoft Exchange Spoofing Vulnerability'. This CVE ID is unique from CVE-2019-0858.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-19
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0817; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0817
CVE: CVE-2019-0822
Published: 2019-04-09
Description: A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka 'Microsoft Graphics Components Remote Code Execution Vulnerability'.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0822; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0822
CVE: CVE-2019-0823
Published: 2019-04-09
Description: A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka 'Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0824, CVE-2019-0825, CVE-2019-0826, CVE-2019-0827.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0823; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0823
CVE: CVE-2019-0824
Published: 2019-04-09
Description: A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka 'Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0823, CVE-2019-0825, CVE-2019-0826, CVE-2019-0827.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0824; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0824
CVE: CVE-2019-0825
Published: 2019-04-09
Description: A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka 'Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0823, CVE-2019-0824, CVE-2019-0826, CVE-2019-0827.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0825; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0825
CVE: CVE-2019-0826
Published: 2019-04-09
Description: A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka 'Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0823, CVE-2019-0824, CVE-2019-0825, CVE-2019-0827.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0826; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0826
CVE: CVE-2019-0827
Published: 2019-04-09
Description: A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka 'Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0823, CVE-2019-0824, CVE-2019-0825, CVE-2019-0826.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0827; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0827
CVE: CVE-2019-0828
Published: 2019-04-09
Description: A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0828; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0828
CVE: CVE-2019-0829
Published: 2019-04-09
Description: A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0806, CVE-2019-0810, CVE-2019-0812, CVE-2019-0860, CVE-2019-0861.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0829; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0829