Moderate severityNVD Advisory· Published Apr 8, 2019· Updated Aug 4, 2024

CVE-2019-0746

Description

An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory in Microsoft Edge, aka 'Scripting Engine Information Disclosure Vulnerability'.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
Microsoft.ChakraCoreNuGet	< 1.11.7	1.11.7

Affected products

ghsa-coords
pkg:nuget/microsoft.chakracore
Range: < 1.11.7
Microsoft/Chakracorecpe-rescue
Range: Windows 10 for 32-bit Systems
Microsoft/Internet Explorercpe-rescue3 versions
Windows Server 2008 R2 for x64-based Systems Service Pack 1+ 2 more
- (no CPE)range: Windows Server 2008 R2 for x64-based Systems Service Pack 1
- (no CPE)range: Windows 7 for 32-bit Systems Service Pack 1
- (no CPE)range: Windows Server 2008 for 32-bit Systems Service Pack 2
Microsoft/Edgecpe-rescue
Range: Windows Server 2012

Patches

Vulnerability mechanics

References

github.com/advisories/GHSA-jhx3-2w5x-x39xghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2019-0746ghsaADVISORY
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0746ghsax_refsource_CONFIRMWEB

News mentions

No linked articles in our index yet.

cvss	0.260
epss	0.005
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000