CVE-2019-1059

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1001, CVE-2019-1004, CVE-2019-1056.

Metrics

CVSS 3.0 7.5/10CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

No affected versions have been published.

Timeline

Published
Jul 15, 2019
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-105909.8Out of bound access while parsing dts atom, which is non-standard as it does not have valid number of tracks in Snapdragon Auto, Snapdragon CVE-2019-105917.5Null pointer dereference can happen when parsing udta atom which is non-standard and having invalid depth in Snapdragon Auto, Snapdragon ComCVE-2019-105927.8Possible integer overflow while multiplying two integers of 32 bit in QDCM API of get display modes as there is no check on the maximum modeCVE-2019-105939.8Buffer overflow can occur when processing non standard SDP video Image attribute parameter in a VILTE\VOLTE call in Snapdragon Auto, SnapdraCVE-2019-105949.8Stack overflow can occur when SDP is received with multiple payload types in the FMTP attribute of a video M line in Snapdragon Auto, SnapdrCVE-2019-105957.8Possible buffer overwrite in message handler due to lack of validation of tid value calculated from packets received from firmware in SnapdrCVE-2019-105967.8u'Improper access control can lead signed process to guess pid of other processes and access their address space' in Snapdragon Auto, SnapdrCVE-2019-105977.8kernel writes to user passed address without any checks can lead to arbitrary memory write in Snapdragon Auto, Snapdragon Compute, SnapdragoCVE-2019-105987.8Out of bound access can occur while processing peer info in IBSS connection mode due to lack of upper bounds check to ensure that for loop fCVE-2019-10608.8A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote CodeCVE-2019-106007.8Use of local variable as argument to netlink CB callback goes out of it scope when callback triggered lead to invalid stack memory in SnapdrCVE-2019-106017.8Out of bound access can occur while processing firmware event due to lack of validation of WMI message received from firmware in Snapdragon