deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-19267
Published: 2019-01-08
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-19268
Published: 2019-01-08
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-19269
Published: 2019-01-08
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-2484
Published: 2019-01-08
Description: SAP Enterprise Financial Services (fixed in SAPSCORE 1.13, 1.14, 1.15; S4CORE 1.01, 1.02, 1.03; EA-FINSERV 1.10, 2.0, 5.0, 6.0, 6.03, 6.04, 6.05, 6.06, 6.16, 6.17, 6.18, 8.0; Bank/CFM 4.63_20) does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges.
CVSS Score: 8.8 (HIGH)
CWE: CWE-862
References: http://www.securityfocus.com/bid/106477; https://launchpad.support.sap.com/#/notes/2662687; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=509151985
CVE: CVE-2018-2499
Published: 2019-01-08
Description: A security weakness in SAP Financial Consolidation Cube Designer (BOBJ_EADES fixed in versions 8.0, 10.1) may allow an attacker to discover the password hash of an admin user.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/bid/106466; https://launchpad.support.sap.com/#/notes/2699233; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=509151985
CVE: CVE-2019-0238
Published: 2019-01-08
Description: SAP Commerce (previously known as SAP Hybris Commerce), before version 6.7, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/106462; https://launchpad.support.sap.com/#/notes/2697573; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=509151985
CVE: CVE-2019-0240
Published: 2019-01-08
Description: SAP Business Objects Mobile for Android (before 6.3.5) application allows an attacker to provide malicious input in the form of a SAP BI link, preventing legitimate users from accessing the application by crashing it.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/bid/106470; https://launchpad.support.sap.com/#/notes/2724059; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=509151985
CVE: CVE-2019-0241
Published: 2019-01-08
Description: SAP Work and Inventory Manager (Agentry_SDK , before 7.0, 7.1) allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/bid/106461; https://launchpad.support.sap.com/#/notes/2725538; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=509151985
CVE: CVE-2019-0243
Published: 2019-01-08
Description: Under some circumstances, masterdata maintenance in SAP BW/4HANA (fixed in DW4CORE version 1.0 (SP08)) does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges.
CVSS Score: 8.8 (HIGH)
CWE: CWE-862
References: http://www.securityfocus.com/bid/106467; https://launchpad.support.sap.com/#/notes/2727623; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=509151985
CVE: CVE-2019-0244
Published: 2019-01-08
Description: SAP CRM WebClient UI (fixed in SAPSCORE 1.12; S4FND 1.02; WEBCUIF 7.31, 7.46, 7.47, 7.48, 8.0, 8.01) does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/106473; https://launchpad.support.sap.com/#/notes/2588763; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=509151985
CVE: CVE-2019-0245
Published: 2019-01-08
Description: SAP CRM WebClient UI (fixed in SAPSCORE 1.12; S4FND 1.02; WEBCUIF 7.31, 7.46, 7.47, 7.48, 8.0, 8.01) does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/106468; https://launchpad.support.sap.com/#/notes/2588763; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=509151985
CVE: CVE-2019-0246
Published: 2019-01-08
Description: SAP Cloud Connector, before version 2.11.3, does not perform any authentication checks for functionalities that require user identity.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306
References: http://www.securityfocus.com/bid/106463; https://launchpad.support.sap.com/#/notes/2696233; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=509151985
CVE: CVE-2019-0247
Published: 2019-01-08
Description: SAP Cloud Connector, before version 2.11.3, allows an attacker to inject code that can be executed by the application. An attacker could thereby control the behavior of the application.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://launchpad.support.sap.com/#/notes/2696233; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=509151985; https://launchpad.support.sap.com/#/notes/2696233
CVE: CVE-2019-0248
Published: 2019-01-08
Description: Under certain conditions SAP Gateway of ABAP Application Server (fixed in SAP_GWFND 7.5, 7.51, 7.52, 7.53; SAP_BASIS 7.5) allows an attacker to access information which would otherwise be restricted.
CVSS Score: 5.9 (MEDIUM)
References: http://www.securityfocus.com/bid/106471; https://launchpad.support.sap.com/#/notes/2723142; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=509151985
CVE: CVE-2019-0249
Published: 2019-01-08
Description: Under certain conditions SAP Landscape Management (VCM 3.0) allows an attacker to access information which would otherwise be restricted.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/bid/106464; https://launchpad.support.sap.com/#/notes/2727624; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=509151985
CVE: CVE-2019-0536
Published: 2019-01-08
Description: An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2019-0549, CVE-2019-0554, CVE-2019-0569.
CVSS Score: 5.5 (MEDIUM)
References: http://www.securityfocus.com/bid/106406; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0536; http://www.securityfocus.com/bid/106406
CVE: CVE-2019-0537
Published: 2019-01-08
Description: An information disclosure vulnerability exists when Visual Studio improperly discloses arbitrary file contents if the victim opens a malicious .vscontent file, aka "Microsoft Visual Studio Information Disclosure Vulnerability." This affects Microsoft Visual Studio.
CVSS Score: 5.5 (MEDIUM)
References: http://www.securityfocus.com/bid/106390; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0537; http://www.securityfocus.com/bid/106390
CVE: CVE-2019-0538
Published: 2019-01-08
Description: A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database Engine Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2019-0575, CVE-2019-0576, CVE-2019-0577, CVE-2019-0578, CVE-2019-0579, CVE-2019-0580, CVE-2019-0581, CVE-2019-0582, CVE-2019-0583, CVE-2019-0584.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/106419; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0538; http://www.securityfocus.com/bid/106419
CVE: CVE-2019-0539
Published: 2019-01-08
Description: A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2019-0567, CVE-2019-0568.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/106401; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0539; https://www.exploit-db.com/exploits/46203/
CVE: CVE-2019-0541
Published: 2019-01-08
Description: A remote code execution vulnerability exists in the way that the MSHTML engine inproperly validates input, aka "MSHTML Engine Remote Code Execution Vulnerability." This affects Microsoft Office, Microsoft Office Word Viewer, Internet Explorer 9, Internet Explorer 11, Microsoft Excel Viewer, Internet Explorer 10, Office 365 ProPlus.
CVSS Score: 8.8 (HIGH)
CWE: CWE-77, CWE-77
References: http://www.securityfocus.com/bid/106402; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0541; https://www.exploit-db.com/exploits/46536/
CVE: CVE-2019-0543
Published: 2019-01-08
Description: An elevation of privilege vulnerability exists when Windows improperly handles authentication requests, aka "Microsoft Windows Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.
CVSS Score: 7.8 (HIGH)
CWE: CWE-287, CWE-287
References: http://www.securityfocus.com/bid/106408; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0543; https://www.exploit-db.com/exploits/46156/
CVE: CVE-2019-0545
Published: 2019-01-08
Description: An information disclosure vulnerability exists in .NET Framework and .NET Core which allows bypassing Cross-origin Resource Sharing (CORS) configurations, aka ".NET Framework Information Disclosure Vulnerability." This affects Microsoft .NET Framework 2.0, Microsoft .NET Framework 3.0, Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2, Microsoft .NET Framework 4.5.2, Microsoft .NET Framework 4.6, Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2, Microsoft .NET Framework 4.7/4.7.1/4.7.2, .NET Core 2.1, Microsoft .NET Framework 4.7.1/4.7.2, Microsoft .NET Framework 3.5, Microsoft .NET Framework 3.5.1, Microsoft .NET Framework 4.6/4.6.1/4.6.2, .NET Core 2.2, Microsoft .NET Framework 4.7.2.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://www.securityfocus.com/bid/106405; https://access.redhat.com/errata/RHSA-2019:0040; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0545
CVE: CVE-2019-0546
Published: 2019-01-08
Description: A remote code execution vulnerability exists in Visual Studio when the C++ compiler improperly handles specific combinations of C++ constructs, aka "Visual Studio Remote Code Execution Vulnerability." This affects Microsoft Visual Studio.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/106391; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0546; http://www.securityfocus.com/bid/106391
CVE: CVE-2019-0547
Published: 2019-01-08
Description: A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client, aka "Windows DHCP Client Remote Code Execution Vulnerability." This affects Windows 10, Windows 10 Servers.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: http://www.securityfocus.com/bid/106394; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0547; http://www.securityfocus.com/bid/106394
CVE: CVE-2019-0548
Published: 2019-01-08
Description: A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka "ASP.NET Core Denial of Service Vulnerability." This affects ASP.NET Core 2.2, ASP.NET Core 2.1. This CVE ID is unique from CVE-2019-0564.
CVSS Score: 7.5 (HIGH)
CWE: CWE-19
References: http://www.securityfocus.com/bid/106410; https://access.redhat.com/errata/RHSA-2019:0040; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0548
CVE: CVE-2019-0549
Published: 2019-01-08
Description: An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2019-0536, CVE-2019-0554, CVE-2019-0569.
CVSS Score: 5.5 (MEDIUM)
References: http://www.securityfocus.com/bid/106409; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0549; http://www.securityfocus.com/bid/106409
CVE: CVE-2019-0550
Published: 2019-01-08
Description: A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka "Windows Hyper-V Remote Code Execution Vulnerability." This affects Windows 10 Servers, Windows 10, Windows Server 2019. This CVE ID is unique from CVE-2019-0551.
CVSS Score: 8.4 (HIGH)
CWE: CWE-20
References: http://www.securityfocus.com/bid/106385; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0550; http://www.securityfocus.com/bid/106385
CVE: CVE-2019-0551
Published: 2019-01-08
Description: A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka "Windows Hyper-V Remote Code Execution Vulnerability." This affects Windows Server 2016, Windows 10, Windows Server 2019, Windows 10 Servers. This CVE ID is unique from CVE-2019-0550.
CVSS Score: 8.4 (HIGH)
CWE: CWE-20
References: http://www.securityfocus.com/bid/106386; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0551; http://www.securityfocus.com/bid/106386
CVE: CVE-2019-0552
Published: 2019-01-08
Description: An elevation of privilege exists in Windows COM Desktop Broker, aka "Windows COM Elevation of Privilege Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2019, Windows Server 2016, Windows 8.1, Windows 10, Windows 10 Servers.
CVSS Score: 8.8 (HIGH)
CWE: CWE-863
References: http://www.securityfocus.com/bid/106407; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0552; https://www.exploit-db.com/exploits/46162/
CVE: CVE-2019-0553
Published: 2019-01-08
Description: An information disclosure vulnerability exists when Windows Subsystem for Linux improperly handles objects in memory, aka "Windows Subsystem for Linux Information Disclosure Vulnerability." This affects Windows 10 Servers, Windows 10, Windows Server 2019.
CVSS Score: 5.5 (MEDIUM)
References: http://www.securityfocus.com/bid/106412; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0553; http://www.securityfocus.com/bid/106412
CVE: CVE-2019-0554
Published: 2019-01-08
Description: An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2019-0536, CVE-2019-0549, CVE-2019-0569.
CVSS Score: 5.5 (MEDIUM)
References: http://www.securityfocus.com/bid/106411; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0554; http://www.securityfocus.com/bid/106411
CVE: CVE-2019-0555
Published: 2019-01-08
Description: An elevation of privilege vulnerability exists in the Microsoft XmlDocument class that could allow an attacker to escape from the AppContainer sandbox in the browser, aka "Microsoft XmlDocument Elevation of Privilege Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2012, Windows Server 2019, Windows Server 2016, Windows 8.1, Windows 10, Windows 10 Servers.
CVSS Score: 7.8 (HIGH)
CWE: CWE-862
References: http://www.securityfocus.com/bid/106395; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0555; https://www.exploit-db.com/exploits/46185/
CVE: CVE-2019-0556
Published: 2019-01-08
Description: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft Office SharePoint XSS Vulnerability." This affects Microsoft SharePoint. This CVE ID is unique from CVE-2019-0557, CVE-2019-0558.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://www.securityfocus.com/bid/106387; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0556; http://www.securityfocus.com/bid/106387
CVE: CVE-2019-0557
Published: 2019-01-08
Description: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft Office SharePoint XSS Vulnerability." This affects Microsoft SharePoint. This CVE ID is unique from CVE-2019-0556, CVE-2019-0558.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://www.securityfocus.com/bid/106388; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0557; http://www.securityfocus.com/bid/106388
CVE: CVE-2019-0558
Published: 2019-01-08
Description: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft Office SharePoint XSS Vulnerability." This affects Microsoft SharePoint Server, Microsoft SharePoint, Microsoft Business Productivity Servers. This CVE ID is unique from CVE-2019-0556, CVE-2019-0557.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://www.securityfocus.com/bid/106389; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0558; http://www.securityfocus.com/bid/106389
CVE: CVE-2019-0559
Published: 2019-01-08
Description: An information disclosure vulnerability exists when Microsoft Outlook improperly handles certain types of messages, aka "Microsoft Outlook Information Disclosure Vulnerability." This affects Office 365 ProPlus, Microsoft Office, Microsoft Outlook.
CVSS Score: 6.5 (MEDIUM)
References: http://www.securityfocus.com/bid/106397; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0559; http://www.securityfocus.com/bid/106397
CVE: CVE-2019-0560
Published: 2019-01-08
Description: An information disclosure vulnerability exists when Microsoft Office improperly discloses the contents of its memory, aka "Microsoft Office Information Disclosure Vulnerability." This affects Office 365 ProPlus, Microsoft Office.
CVSS Score: 5.5 (MEDIUM)
References: http://www.securityfocus.com/bid/106398; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0560; http://www.securityfocus.com/bid/106398
CVE: CVE-2019-0561
Published: 2019-01-08
Description: An information disclosure vulnerability exists when Microsoft Word macro buttons are used improperly, aka "Microsoft Word Information Disclosure Vulnerability." This affects Microsoft Word, Office 365 ProPlus, Microsoft Office, Word.
CVSS Score: 5.5 (MEDIUM)
References: http://www.securityfocus.com/bid/106399; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0561; http://www.securityfocus.com/bid/106399
CVE: CVE-2019-0562
Published: 2019-01-08
Description: An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft SharePoint Elevation of Privilege Vulnerability." This affects Microsoft SharePoint Server, Microsoft SharePoint.
CVSS Score: 5.4 (MEDIUM)
References: http://www.securityfocus.com/bid/106400; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0562; http://www.securityfocus.com/bid/106400
CVE: CVE-2019-0564
Published: 2019-01-08
Description: A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka "ASP.NET Core Denial of Service Vulnerability." This affects ASP.NET Core 2.1. This CVE ID is unique from CVE-2019-0548.
CVSS Score: 7.5 (HIGH)
CWE: CWE-19
References: http://www.securityfocus.com/bid/106413; https://access.redhat.com/errata/RHSA-2019:0040; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0564
CVE: CVE-2019-0565
Published: 2019-01-08
Description: A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability." This affects Microsoft Edge.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/106416; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0565; http://www.securityfocus.com/bid/106416
CVE: CVE-2019-0566
Published: 2019-01-08
Description: An elevation of privilege vulnerability exists in Microsoft Edge Browser Broker COM object, aka "Microsoft Edge Elevation of Privilege Vulnerability." This affects Microsoft Edge.
CVSS Score: 8.8 (HIGH)
CWE: CWE-862
References: http://www.securityfocus.com/bid/106417; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0566; https://www.exploit-db.com/exploits/46161/
CVE: CVE-2019-0567
Published: 2019-01-08
Description: A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2019-0539, CVE-2019-0568.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/106418; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0567; https://www.exploit-db.com/exploits/46203/
CVE: CVE-2019-0568
Published: 2019-01-08
Description: A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2019-0539, CVE-2019-0567.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/106420; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0568; https://www.exploit-db.com/exploits/46205/
CVE: CVE-2019-0569
Published: 2019-01-08
Description: An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2019-0536, CVE-2019-0549, CVE-2019-0554.
CVSS Score: 5.5 (MEDIUM)
References: http://www.securityfocus.com/bid/106414; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0569; http://www.securityfocus.com/bid/106414