PT-2019-3014 · Microsoft · Edge

Abdulrahman Al-Qabandi · Publicado 2019-08-13 · Atualizado 2026-02-20 · CVE-2019-1030

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Microsoft Edge (affected versions not specified)

Description An information disclosure issue exists due to improper handling of objects in memory by Microsoft Edge. This could allow an attacker to obtain information that could further compromise a user's system. The vulnerability can be exploited through a web-based attack, where an attacker hosts a specially crafted website or compromises a website that accepts user-provided content. However, the attacker would need to convince the user to view the malicious content, as they cannot force the user to do so. For example, the attacker might trick the user into clicking a link to their site.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

BDU:2019-02993

CVE-2019-1030

Produtos afetados

Edge

Referências · 6

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1030 · Nota de Segurança
• https://t.me/cvenotify/81433 · Publicação no Telegram
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1030 · Aviso do Fabricante
• https://t.me/cveNotify/152660 · Publicação no Telegram
• https://bdu.fstec.ru/vul/2019-02993 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2019-1030 · Nota de Segurança