CVE-2019-0592

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0611.

Metrics

CVSS 3.0 7.5/10CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

VendorProductVersions
MicrosoftMicrosoft EdgeWindows 10 Version 1809 for 32-bit Systems; Windows 10 Version 1809 for x64-based Systems; Windows 10 Version 1809 for ARM64-based Systems; Windows Server 2019
MicrosoftChakraCoreunspecified

References

Timeline

Published
Apr 8, 2019
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-05937.5A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'ScriptinCVE-2019-05948.8A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application paCVE-2019-05957.8A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database EnCVE-2019-05967.8A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database EnCVE-2019-05977.8A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database EnCVE-2019-05987.8A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database EnCVE-2019-05997.8A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database EnCVE-2019-06004.7An information disclosure vulnerability exists when the Human Interface Devices (HID) component improperly handles objects in memory, aka 'HCVE-2019-06014.7An information disclosure vulnerability exists when the Human Interface Devices (HID) component improperly handles objects in memory, aka 'HCVE-2019-06026.5An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows CVE-2019-06037.5A remote code execution vulnerability exists in the way that Windows Deployment Services TFTP Server handles objects in memory. An attacker CVE-2019-06049.8A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application pa
CVE-2019-0592: High severity, CVSS 7.5 | Vulnix