Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
kasperskyKaspersky LabKLA11533
HistoryAug 13, 2019 - 12:00 a.m.

KLA11533 Multiple vulnerabilities in Microsoft Browsers

2019-08-1300:00:00
Kaspersky Lab
threats.kaspersky.com
26

7.6 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

7.9 High

AI Score

Confidence

High

0.038 Low

EPSS

Percentile

91.9%

JSON

Multiple vulnerabilities were found in Microsoft Browsers. Malicious users can exploit these vulnerabilities to bypass security restrictions, obtain sensitive information, execute arbitrary code.

Below is a complete list of vulnerabilities:

  1. A security feature bypass vulnerability in Microsoft Browsers can be exploited remotely via specially crafted website to bypass security restrictions.
  2. An information disclosure vulnerability in Microsoft Edge can be exploited remotely via specially crafted content to obtain sensitive information.
  3. A memory corruption vulnerability in Chakra Scripting Engine can be exploited remotely via specially crafted website to execute arbitrary code.
  4. A memory corruption vulnerability in Scripting Engine can be exploited remotely via specially crafted website to execute arbitrary code.
  5. A memory corruption vulnerability in Microsoft Browser can be exploited remotely via specially crafted website to execute arbitrary code.

Original advisories

CVE-2019-1192

CVE-2019-1030

CVE-2019-1131

CVE-2019-1196

CVE-2019-1197

CVE-2019-1194

CVE-2019-1193

CVE-2019-1133

CVE-2019-1195

CVE-2019-1140

CVE-2019-1139

CVE-2019-1141

Exploitation

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Related products

Microsoft-Internet-Explorer

Microsoft-Edge

CVE list

CVE-2019-1192 warning

CVE-2019-1030 warning

CVE-2019-1131 critical

CVE-2019-1196 critical

CVE-2019-1197 critical

CVE-2019-1194 critical

CVE-2019-1193 critical

CVE-2019-1133 critical

CVE-2019-1195 critical

CVE-2019-1140 critical

CVE-2019-1139 critical

CVE-2019-1141 critical

KB list

4512516

4511553

4512501

4512497

4512517

4512518

4512506

4512488

4512508

4512507

4511872

4520010

4520008

4520007

4519998

4520005

4517389

4519338

4520011

4520004

4519976

4519974

Solution

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

Impacts

  • ACE

Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.

  • OSI

Obtain sensitive information. Exploitation of vulnerabilities with this impact can lead to capturing by abuser information, critical for user or system.

  • SB

Security bypass. Exploitation of vulnerabilities with this impact can lead to performing actions restricted by current security settings.

Affected Products

  • Internet Explorer 10Internet Explorer 11Microsoft Edge

References

Related

prion 12
osv 7
github 7
nessus 12
mskb 23
mscve 13
cvelist 12
symantec 12
cve 13
veracode 6
nvd 13
vulnrichment 4
checkpoint_advisories 7
openvas 20
talosblog 1
kaspersky 1
prion
prion
Remote code execution
2019-08-14 21:15:00
Remote code execution
2019-08-14 21:15:00
Remote code execution
2019-08-14 21:15:00
osv
osv
Out-of-bounds write
2021-03-29 20:57:49
Out-of-bounds write
2021-03-29 20:57:53
Out-of-bounds write
2021-03-29 20:56:15
github
github
Out-of-bounds write in Microsoft.ChakraCore
2021-03-29 20:57:53
Out-of-bounds write in ChakraCore
2021-03-29 20:58:01
Out-of-bounds write
2021-03-29 20:56:15
nessus
nessus
Security Updates for Internet Explorer (August 2019)
2019-08-13 00:00:00
KB4512507: Windows 10 Version 1703 August 2019 Security Update
2019-08-13 00:00:00
KB4511553: Windows 10 Version 1809 and Windows Server 2019 August 2019 Security Update
2019-08-13 00:00:00
mskb
mskb
Cumulative security update for Internet Explorer: August 13, 2019
2019-08-13 07:00:00
August 13, 2019—KB4512516 (OS Build 16299.1331)
2019-08-13 07:00:00
August 13, 2019—KB4512508 (OS Build 18362.295)
2019-08-13 07:00:00
mscve
mscve
Scripting Engine Memory Corruption Vulnerability
2019-08-13 07:00:00
Microsoft Edge based on Edge HTML Information Disclosure Vulnerability
2019-08-13 07:00:00
Microsoft Browser Memory Corruption Vulnerability
2019-08-13 07:00:00
cvelist
cvelist
CVE-2019-1133 Scripting Engine Memory Corruption Vulnerability
2019-08-14 20:55:02
CVE-2019-1030 Microsoft Edge based on Edge HTML Information Disclosure Vulnerability
2019-08-14 20:55:02
CVE-2019-1193 Microsoft Browser Memory Corruption Vulnerability
2019-08-14 20:55:04
symantec
symantec
Microsoft Edge Scripting Engine CVE-2019-1030 Information Disclosure Vulnerability
2019-08-13 00:00:00
Microsoft Internet Explorer Scripting Engine CVE-2019-1193 Remote Memory Corruption Vulnerability
2019-08-13 00:00:00
Microsoft Edge Scripting Engine CVE-2019-1131 Remote Memory Corruption Vulnerability
2019-08-13 00:00:00
cve
cve
CVE-2019-1193
2019-08-14 21:15:17
CVE-2019-1030
2019-08-14 21:15:13
CVE-2019-1141
2019-08-14 21:15:14
veracode
veracode
Remote Code Execution (RCE)
2019-08-15 02:43:46
Remote Code Execution (RCE)
2019-08-15 02:27:29
Remote Code Execution (RCE)
2019-08-15 02:24:22
nvd
nvd
CVE-2019-1133
2019-08-14 21:15:14
CVE-2019-1140
2019-08-14 21:15:14
CVE-2019-1030
2019-08-14 21:15:13
vulnrichment
vulnrichment
CVE-2019-1193 Microsoft Browser Memory Corruption Vulnerability
2019-08-14 20:55:04
CVE-2019-1194 Scripting Engine Memory Corruption Vulnerability
2019-08-14 20:55:04
CVE-2019-1139 Chakra Scripting Engine Memory Corruption Vulnerability
2019-08-14 20:55:02
checkpoint_advisories
checkpoint_advisories
Microsoft Internet Explorer Memory Corruption(CVE-2019-1194)
2020-05-21 00:00:00
Microsoft Edge Chakra Scripting Engine Memory Corruption (CVE-2019-1195)
2019-08-13 00:00:00
Microsoft Edge Chakra Scripting Engine Memory Corruption (CVE-2019-1197)
2019-08-13 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for samba (EulerOS-SA-2019-1598)
2020-01-23 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB4512507)
2019-08-14 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB4512508)
2019-08-14 00:00:00
talosblog
talosblog
Microsoft Patch Tuesday — Aug. 2019: Vulnerability disclosures and Snort coverage
2019-08-14 09:55:35
kaspersky
kaspersky
KLA11989 Multiple vulnerabilities in Microsoft Products (ESU)
2019-08-13 00:00:00

7.6 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

7.9 High

AI Score

Confidence

High

0.038 Low

EPSS

Percentile

91.9%

JSON
Related for KLA11533
prion12osv7github7nessus12mskb23mscve13cvelist12symantec12cve13veracode6nvd13vulnrichment4checkpoint_advisories7openvas20talosblog1kaspersky1