CVE-2019-1356

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

An information disclosure vulnerability exists when Microsoft Edge based on Edge HTML improperly handles objects in memory, aka 'Microsoft Edge based on Edge HTML Information Disclosure Vulnerability'.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-200

Affected software

VendorProductVersions
MicrosoftMicrosoft Edge (EdgeHTML-based) on Windows Server 2016unspecified
MicrosoftMicrosoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for 32-bit Systemsunspecified
MicrosoftMicrosoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for x64-based Systemsunspecified
MicrosoftMicrosoft Edge (EdgeHTML-based) on Windows 10 Version 1703 for 32-bit Systemsunspecified
MicrosoftMicrosoft Edge (EdgeHTML-based) on Windows 10 Version 1703 for x64-based Systemsunspecified
MicrosoftMicrosoft Edge (EdgeHTML-based) on Windows 10 Version 1709 for 32-bit Systemsunspecified
MicrosoftMicrosoft Edge (EdgeHTML-based) on Windows 10 Version 1709 for x64-based Systemsunspecified
MicrosoftMicrosoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for 32-bit Systemsunspecified
MicrosoftMicrosoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for x64-based Systemsunspecified
MicrosoftMicrosoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for ARM64-based Systemsunspecified
MicrosoftMicrosoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for 32-bit Systemsunspecified
MicrosoftMicrosoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for x64-based Systemsunspecified
MicrosoftMicrosoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for ARM64-based Systemsunspecified
MicrosoftMicrosoft Edge (EdgeHTML-based) on Windows Server 2019unspecified
MicrosoftMicrosoft Edge (EdgeHTML-based) on Windows 10 Version 1709 for ARM64-based Systemsunspecified
MicrosoftMicrosoft Edge (EdgeHTML-based) on Windows 10 Version 1903 for 32-bit Systemsunspecified
MicrosoftMicrosoft Edge (EdgeHTML-based) on Windows 10 Version 1903 for x64-based Systemsunspecified
MicrosoftMicrosoft Edge (EdgeHTML-based) on Windows 10 Version 1903 for ARM64-based Systemsunspecified

References

Timeline

Published
Oct 10, 2019
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-135609.8D-Link DIR-655 C devices before 3.02B05 BETA03 allow remote attackers to force a blank password via the apply_sec.cgi setup_wizard parameterCVE-2019-135619.8D-Link DIR-655 C devices before 3.02B05 BETA03 allow remote attackers to execute arbitrary commands via shell metacharacters in the online_fCVE-2019-135626.1D-Link DIR-655 C devices before 3.02B05 BETA03 allow XSS, as demonstrated by the /www/ping_response.cgi ping_ipaddr parameter, the /www/pingCVE-2019-135638.8D-Link DIR-655 C devices before 3.02B05 BETA03 allow CSRF for the entire management console.CVE-2019-135646.1XSS exists in Ping Identity Agentless Integration Kit before 1.5.CVE-2019-135657.5An issue was discovered in OpenLDAP 2.x before 2.4.48. When using SASL authentication and session encryption, and relying on the SASL securiCVE-2019-135669.8An issue was discovered in the ROS communications-related packages (aka ros_comm or ros-melodic-ros-comm) through 1.14.3. A buffer overflow CVE-2019-135678.8The Zoom Client before 4.4.53932.0709 on macOS allows remote code execution, a different vulnerability than CVE-2019-13450. If the ZoomOpeneCVE-2019-135688.8CImg through 2.6.7 has a heap-based buffer overflow in _load_bmp in CImg.h because of erroneous memory allocation for a malformed BMP image.CVE-2019-135699.8A SQL injection vulnerability exists in the Icegram Email Subscribers & Newsletters plugin through 4.1.7 for WordPress. Successful exploitatCVE-2019-13574.3A spoofing vulnerability exists when Microsoft Browsers improperly handle browser cookies, aka 'Microsoft Browser Spoofing Vulnerability'. TCVE-2019-135707.2The AJdG AdRotate plugin before 5.3 for WordPress allows SQL Injection.
CVE-2019-1356: Medium severity, CVSS 6.5 | Vulnix