rainbutterfly/cve_corpus huggingface dataset:
CVE-2019-0385 
SAP Enable Now, before version 1908, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.
Problem types: description: Cross-Site Scripting
Affected products: vendor: SAP SE
product: SAP Enable Now
Published: 2019-11-13T21:57:40.000Z
CVE-2019-0386 
Order processing in SAP ERP Sales (corrected in SAP_APPL 6.0, 6.02, 6.03, 6.04, 6.05, 6.06, 6.16, 6.17, 6.18) and S4HANA Sales (corrected in S4CORE 1.0, 1.01, 1.02, 1.03, 1.04) does not execute the required authorization checks for an authenticated user, which can result in an escalation of privileges.
Problem types: description: Missing Authorization Check
Affected products: vendor: SAP SE
product: SAP ERP Sales (SAP_APPL)
vendor: SAP SE
product: S4HANA Sales (S4CORE)
Published: 2019-11-13T22:18:40.000Z
CVE-2019-0388 
SAP UI5 HTTP Handler (corrected in SAP_UI versions 7.5, 7.51, 7.52, 7.53, 7.54 and SAP UI_700 version 2.0) allows an attacker to manipulate content due to insufficient URL validation.
Problem types: description: Other
Affected products: vendor: SAP SE
product: SAP UI
vendor: SAP SE
product: SAP UI 700
Published: 2019-11-13T22:17:37.000Z
CVE-2019-0389 
An administrator of SAP NetWeaver Application Server Java (J2EE-Framework), (corrected in versions 7.1, 7.2, 7.3, 7.31, 7.4, 7.5), may change privileges for all or some functions in Java Server, and enable users to execute functions, they are not allowed to execute otherwise.
Problem types: description: Other
Affected products: vendor: SAP SE
product: SAP NetWeaver Application Server Java (J2EE-Framework)
Published: 2019-11-13T21:58:44.000Z
CVE-2019-0390 
Under certain conditions SAP Data Hub (corrected in DH_Foundation version 2) allows an attacker to access information which would otherwise be restricted. Connection details that are maintained in Connection Manager are visible to users.
Problem types: description: Information Disclosure
Affected products: vendor: SAP SE
product: SAP Data Hub (DH_Foundation)
Published: 2019-11-13T22:00:25.000Z
CVE-2019-0391 
Under certain conditions SAP NetWeaver AS Java (corrected in 7.10, 7.20, 7.30, 7.31, 7.40, 7.50) allows an attacker to access information which would otherwise be restricted.
Problem types: description: Information Disclosure
Affected products: vendor: SAP SE
product: SAP NetWeaver AS Java
Published: 2019-11-13T22:00:44.000Z
CVE-2019-0393 
An SQL Injection vulnerability in SAP Quality Management (corrected in S4CORE versions 1.0, 1.01, 1.02, 1.03) allows an attacker to carry out targeted database queries that can read individual fields of historical inspection results.
Problem types: description: SQL Injection
Affected products: vendor: SAP SE
product: SAP Quality Management (S4CORE)
Published: 2019-11-13T21:59:55.000Z
CVE-2019-0395 
SAP BusinessObjects Business Intelligence Platform (Fiori BI Launchpad), before version 4.2, allows execution of JavaScript in a text module in Fiori BI Launchpad, leading to Stored Cross Site Scripting vulnerability.
Problem types: description: Cross-Site Scripting
Affected products: vendor: SAP SE
product: SAP BusinessObjects Business Intelligence Platform (Fiori BI Launchpad)
Published: 2019-12-11T21:34:56.000Z
CVE-2019-0396 
SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface), corrected in versions 4.1 and 4.2, does not sufficiently validate an XML document accepted from an untrusted source. An attacker can craft a message that contains malicious elements that will not be correctly filtered by Web Intelligence HTML interface in some specific workflows.
Problem types: description: Missing XML Validation
Affected products: vendor: SAP SE
product: SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface)
Published: 2019-11-13T22:18:04.000Z
CVE-2019-0398 
Due to insufficient CSRF protection, SAP BusinessObjects Business Intelligence Platform (Monitoring Application), before versions 4.1, 4.2 and 4.3, may lead to an authenticated user to send unintended request to the web server, leading to Cross Site Request Forgery.
Problem types: description: Cross Site Request Forgery
Affected products: vendor: SAP SE
product: SAP BusinessObjects Business Intelligence Platform (Monitoring Application)
Published: 2019-12-11T21:35:01.000Z
CVE-2019-0399 
SAP Portfolio and Project Management, before versions S4CORE 102, 103, EPPM 100 and CPRXRPM 500_702, 600_740, 610_740; unintentionally allows a user to discover accounting information of the Projects in Project dashboard, leading to Information Disclosure.
Problem types: description: Information Disclosure
Affected products: vendor: SAP SE
product: SAP Portfolio and Project Management (S4CORE)
vendor: SAP SE
product: SAP Portfolio and Project Management (EPPM)
vendor: SAP SE
product: SAP Portfolio and Project Management (CPRXRPM)
Published: 2019-12-11T21:35:06.000Z
CVE-2019-0402 
SAP Adaptive Server Enterprise, before versions 15.7 and 16.0, under certain conditions exposes some sensitive information to the admin, leading to Information Disclosure.
Problem types: description: Information Disclosure
Affected products: vendor: SAP SE
product: SAP Adaptive Server Enterprise
Published: 2019-12-11T21:35:21.000Z
CVE-2019-0403 
SAP Enable Now, before version 1911, allows an attacker to input commands into the CSV files, which will be executed when opened, leading to CSV Command Injection.
Problem types: description: others
Affected products: vendor: SAP SE
product: SAP Enable Now
Published: 2019-12-11T21:35:26.000Z
CVE-2019-0404 
SAP Enable Now, before version 1911, leaks information about network configuration in the server error messages, leading to Information Disclosure.
Problem types: description: Information Disclosure
Affected products: vendor: SAP SE
product: SAP Enable Now
Published: 2019-12-11T21:35:30.000Z
CVE-2019-0405 
SAP Enable Now, before version 1911, leaks information about the existence of a particular user which can be used to construct a list of users, leading to a user enumeration vulnerability and Information Disclosure.
Problem types: description: Information Disclosure
Affected products: vendor: SAP SE
product: SAP Enable Now
Published: 2019-12-11T21:35:37.000Z
CVE-2019-0536 
An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2019-0549, CVE-2019-0554, CVE-2019-0569.
Problem types: description: Information Disclosure
Affected products: vendor: Microsoft
product: Windows 7
vendor: Microsoft
product: Windows Server 2012 R2
vendor: Microsoft
product: Windows RT 8.1
vendor: Microsoft
product: Windows Server 2008
vendor: Microsoft
product: Windows Server 2019
vendor: Microsoft
product: Windows Server 2012
vendor: Microsoft
product: Windows 8.1
vendor: Microsoft
product: Windows Server 2016
vendor: Microsoft
product: Windows Server 2008 R2
vendor: Microsoft
product: Windows 10
vendor: Microsoft
product: Windows 10 Servers
Published: 2019-01-08T21:00:00.000Z
CVE-2019-0537 
An information disclosure vulnerability exists when Visual Studio improperly discloses arbitrary file contents if the victim opens a malicious .vscontent file, aka "Microsoft Visual Studio Information Disclosure Vulnerability." This affects Microsoft Visual Studio.
Problem types: description: Information Disclosure
Affected products: vendor: Microsoft
product: Microsoft Visual Studio
Published: 2019-01-08T21:00:00.000Z
CVE-2019-0538 
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database Engine Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2019-0575, CVE-2019-0576, CVE-2019-0577, CVE-2019-0578, CVE-2019-0579, CVE-2019-0580, CVE-2019-0581, CVE-2019-0582, CVE-2019-0583, CVE-2019-0584.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-08T21:00:00.000Z
CVE-2019-0539 
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2019-0567, CVE-2019-0568.
Problem types: description: Remote Code Execution
Affected products: vendor: Microsoft
product: Microsoft Edge
vendor: Microsoft
product: ChakraCore
Published: 2019-01-08T21:00:00.000Z
CVE-2019-0540 
A security feature bypass vulnerability exists when Microsoft Office does not validate URLs.An attacker could send a victim a specially crafted file, which could trick the victim into entering credentials, aka 'Microsoft Office Security Feature Bypass Vulnerability'.
Problem types: description: Security Feature Bypass
Affected products: vendor: Microsoft
product: Microsoft Office
vendor: Microsoft
product: Microsoft Excel Viewer
vendor: Microsoft
product: Office 365 ProPlus
vendor: Microsoft
product: Microsoft PowerPoint Viewer
vendor: Microsoft
product: Microsoft Office Compatibility Pack
Published: 2019-03-06T00:00:00.000Z
CVE-2019-0541 
A remote code execution vulnerability exists in the way that the MSHTML engine inproperly validates input, aka "MSHTML Engine Remote Code Execution Vulnerability." This affects Microsoft Office, Microsoft Office Word Viewer, Internet Explorer 9, Internet Explorer 11, Microsoft Excel Viewer, Internet Explorer 10, Office 365 ProPlus.
Problem types: description: Remote Code Execution
Affected products: vendor: Microsoft
product: Microsoft Office
vendor: Microsoft
product: Microsoft Office Word Viewer
vendor: Microsoft
product: Internet Explorer 9
vendor: Microsoft
product: Internet Explorer 11
vendor: Microsoft
product: Microsoft Excel Viewer
vendor: Microsoft
product: Internet Explorer 10
vendor: Microsoft
product: Office
Published: 2019-01-08T21:00:00.000Z
CVE-2019-0542 
A remote code execution vulnerability exists in Xterm.js when the component mishandles special characters, aka "Xterm Remote Code Execution Vulnerability." This affects xterm.js.
Problem types: description: n/a
Affected products: vendor: https://xtermjs.org/
product: xterm.js
Published: 2019-01-09T15:00:00.000Z
CVE-2019-0543 
An elevation of privilege vulnerability exists when Windows improperly handles authentication requests, aka "Microsoft Windows Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-08T21:00:00.000Z
CVE-2019-0545 
An information disclosure vulnerability exists in .NET Framework and .NET Core which allows bypassing Cross-origin Resource Sharing (CORS) configurations, aka ".NET Framework Information Disclosure Vulnerability." This affects Microsoft .NET Framework 2.0, Microsoft .NET Framework 3.0, Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2, Microsoft .NET Framework 4.5.2, Microsoft .NET Framework 4.6, Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2, Microsoft .NET Framework 4.7/4.7.1/4.7.2, .NET Core 2.1, Microsoft .NET Framework 4.7.1/4.7.2, Microsoft .NET Framework 3.5, Microsoft .NET Framework 3.5.1, Microsoft .NET Framework 4.6/4.6.1/4.6.2, .NET Core 2.2, Microsoft .NET Framework 4.7.2.
Problem types: description: Information Disclosure
Affected products: vendor: Microsoft
product: .NET Core
vendor: Microsoft
product: Microsoft .NET Framework
Published: 2019-01-08T21:00:00.000Z
CVE-2019-0546 
A remote code execution vulnerability exists in Visual Studio when the C++ compiler improperly handles specific combinations of C++ constructs, aka "Visual Studio Remote Code Execution Vulnerability." This affects Microsoft Visual Studio.
Problem types: description: Remote Code Execution
Affected products: vendor: Microsoft
product: Microsoft Visual Studio
Published: 2019-01-08T21:00:00.000Z
CVE-2019-0547 
A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client, aka "Windows DHCP Client Remote Code Execution Vulnerability." This affects Windows 10, Windows 10 Servers.
Problem types: description: Remote Code Execution
Affected products: vendor: Microsoft
product: Windows 10
vendor: Microsoft
product: Windows 10 Servers
Published: 2019-01-08T21:00:00.000Z
CVE-2019-0548 
A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka "ASP.NET Core Denial of Service Vulnerability." This affects ASP.NET Core 2.2, ASP.NET Core 2.1. This CVE ID is unique from CVE-2019-0564.
Problem types: description: Denial of Service
Affected products: vendor: Microsoft
product: ASP.NET Core
Published: 2019-01-08T21:00:00.000Z
CVE-2019-0549 
An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2019-0536, CVE-2019-0554, CVE-2019-0569.
Problem types: description: Information Disclosure
Affected products: vendor: Microsoft
product: Windows 7
vendor: Microsoft
product: Windows Server 2012 R2
vendor: Microsoft
product: Windows RT 8.1
vendor: Microsoft
product: Windows Server 2008
vendor: Microsoft
product: Windows Server 2019
vendor: Microsoft
product: Windows Server 2012
vendor: Microsoft
product: Windows 8.1
vendor: Microsoft
product: Windows Server 2016
vendor: Microsoft
product: Windows Server 2008 R2
vendor: Microsoft
product: Windows 10
vendor: Microsoft
product: Windows 10 Servers
Published: 2019-01-08T21:00:00.000Z
CVE-2019-0550 
A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka "Windows Hyper-V Remote Code Execution Vulnerability." This affects Windows 10 Servers, Windows 10, Windows Server 2019. This CVE ID is unique from CVE-2019-0551.
Problem types: description: Remote Code Execution
Affected products: vendor: Microsoft
product: Windows 10 Servers
vendor: Microsoft
product: Windows 10
vendor: Microsoft
product: Windows Server 2019
Published: 2019-01-08T21:00:00.000Z
CVE-2019-0551 
A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka "Windows Hyper-V Remote Code Execution Vulnerability." This affects Windows Server 2016, Windows 10, Windows Server 2019, Windows 10 Servers. This CVE ID is unique from CVE-2019-0550.
Problem types: description: Remote Code Execution
Affected products: vendor: Microsoft
product: Windows Server 2016
vendor: Microsoft
product: Windows 10
vendor: Microsoft
product: Windows Server 2019
vendor: Microsoft
product: Windows 10 Servers
Published: 2019-01-08T21:00:00.000Z
CVE-2019-0552 
An elevation of privilege exists in Windows COM Desktop Broker, aka "Windows COM Elevation of Privilege Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2019, Windows Server 2016, Windows 8.1, Windows 10, Windows 10 Servers.
Problem types: description: Elevation of Privilege
Affected products: vendor: Microsoft
product: Windows Server 2012 R2
vendor: Microsoft
product: Windows RT 8.1
vendor: Microsoft
product: Windows Server 2019
vendor: Microsoft
product: Windows Server 2016
vendor: Microsoft
product: Windows 8.1
vendor: Microsoft
product: Windows 10
vendor: Microsoft
product: Windows 10 Servers
Published: 2019-01-08T21:00:00.000Z
CVE-2019-0553 
An information disclosure vulnerability exists when Windows Subsystem for Linux improperly handles objects in memory, aka "Windows Subsystem for Linux Information Disclosure Vulnerability." This affects Windows 10 Servers, Windows 10, Windows Server 2019.
Problem types: description: Information Disclosure
Affected products: vendor: Microsoft
product: Windows 10 Servers
vendor: Microsoft
product: Windows 10
vendor: Microsoft
product: Windows Server 2019
Published: 2019-01-08T21:00:00.000Z
CVE-2019-0554 
An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2019-0536, CVE-2019-0549, CVE-2019-0569.
Problem types: description: Information Disclosure
Affected products: vendor: Microsoft
product: Windows 7
vendor: Microsoft
product: Windows Server 2012 R2
vendor: Microsoft
product: Windows RT 8.1
vendor: Microsoft
product: Windows Server 2008
vendor: Microsoft
product: Windows Server 2019
vendor: Microsoft
product: Windows Server 2012
vendor: Microsoft
product: Windows 8.1
vendor: Microsoft
product: Windows Server 2016
vendor: Microsoft
product: Windows Server 2008 R2
vendor: Microsoft
product: Windows 10
vendor: Microsoft
product: Windows 10 Servers
Published: 2019-01-08T21:00:00.000Z
CVE-2019-0555 
An elevation of privilege vulnerability exists in the Microsoft XmlDocument class that could allow an attacker to escape from the AppContainer sandbox in the browser, aka "Microsoft XmlDocument Elevation of Privilege Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2012, Windows Server 2019, Windows Server 2016, Windows 8.1, Windows 10, Windows 10 Servers.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-08T21:00:00.000Z
CVE-2019-0556 
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft Office SharePoint XSS Vulnerability." This affects Microsoft SharePoint. This CVE ID is unique from CVE-2019-0557, CVE-2019-0558.
Problem types: description: Spoofing
Affected products: vendor: Microsoft
product: Microsoft SharePoint
Published: 2019-01-08T21:00:00.000Z
CVE-2019-0557 
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft Office SharePoint XSS Vulnerability." This affects Microsoft SharePoint. This CVE ID is unique from CVE-2019-0556, CVE-2019-0558.
Problem types: description: Spoofing
Affected products: vendor: Microsoft
product: Microsoft SharePoint
Published: 2019-01-08T21:00:00.000Z
CVE-2019-0558 
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft Office SharePoint XSS Vulnerability." This affects Microsoft SharePoint Server, Microsoft SharePoint, Microsoft Business Productivity Servers. This CVE ID is unique from CVE-2019-0556, CVE-2019-0557.
Problem types: description: Spoofing
Affected products: vendor: Microsoft
product: Microsoft SharePoint Server
vendor: Microsoft
product: Microsoft SharePoint
vendor: Microsoft
product: Microsoft Business Productivity Servers
Published: 2019-01-08T21:00:00.000Z
CVE-2019-0559 
An information disclosure vulnerability exists when Microsoft Outlook improperly handles certain types of messages, aka "Microsoft Outlook Information Disclosure Vulnerability." This affects Office 365 ProPlus, Microsoft Office, Microsoft Outlook.
Problem types: description: Information Disclosure
Affected products: vendor: Microsoft
product: Microsoft Office
vendor: Microsoft
product: Office
vendor: Microsoft
product: Microsoft Outlook
Published: 2019-01-08T21:00:00.000Z
CVE-2019-0560 
An information disclosure vulnerability exists when Microsoft Office improperly discloses the contents of its memory, aka "Microsoft Office Information Disclosure Vulnerability." This affects Office 365 ProPlus, Microsoft Office.
Problem types: description: Information Disclosure
Affected products: vendor: Microsoft
product: Microsoft Office
vendor: Microsoft
product: Office
Published: 2019-01-08T21:00:00.000Z
CVE-2019-0561 
An information disclosure vulnerability exists when Microsoft Word macro buttons are used improperly, aka "Microsoft Word Information Disclosure Vulnerability." This affects Microsoft Word, Office 365 ProPlus, Microsoft Office, Word.
Problem types: description: Information Disclosure
Affected products: vendor: Microsoft
product: Microsoft Word
vendor: Microsoft
product: Word
vendor: Microsoft
product: Microsoft Office
vendor: Microsoft
product: Office
Published: 2019-01-08T21:00:00.000Z
CVE-2019-0562 
An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft SharePoint Elevation of Privilege Vulnerability." This affects Microsoft SharePoint Server, Microsoft SharePoint.
Problem types: description: Elevation of Privilege
Affected products: vendor: Microsoft
product: Microsoft SharePoint Server
vendor: Microsoft
product: Microsoft SharePoint
Published: 2019-01-08T21:00:00.000Z
CVE-2019-0564 
A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka "ASP.NET Core Denial of Service Vulnerability." This affects ASP.NET Core 2.1. This CVE ID is unique from CVE-2019-0548.
Problem types: description: Denial of Service
Affected products: vendor: Microsoft
product: ASP.NET Core
Published: 2019-01-08T21:00:00.000Z
CVE-2019-0565 
A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability." This affects Microsoft Edge.
Problem types: description: Remote Code Execution
Affected products: vendor: Microsoft
product: Microsoft Edge
Published: 2019-01-08T21:00:00.000Z
CVE-2019-0566 
An elevation of privilege vulnerability exists in Microsoft Edge Browser Broker COM object, aka "Microsoft Edge Elevation of Privilege Vulnerability." This affects Microsoft Edge.
Problem types: description: Elevation of Privilege
Affected products: vendor: Microsoft
product: Microsoft Edge
Published: 2019-01-08T21:00:00.000Z
CVE-2019-0567 
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2019-0539, CVE-2019-0568.
Problem types: description: Remote Code Execution
Affected products: vendor: Microsoft
product: Microsoft Edge
vendor: Microsoft
product: ChakraCore
Published: 2019-01-08T21:00:00.000Z
CVE-2019-0568 
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2019-0539, CVE-2019-0567.
Problem types: description: Remote Code Execution
Affected products: vendor: Microsoft
product: Microsoft Edge
vendor: Microsoft
product: ChakraCore
Published: 2019-01-08T21:00:00.000Z