CVE-2019-0654

Description

A spoofing vulnerability exists when Microsoft browsers improperly handles specific redirects, aka Microsoft Browser Spoofing Vulnerability.

Risk Information

Base Score
4.4
MODERATE
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
EPSS Score
Exploitation Probability
3.573

Associated Vulnerability

VulnerabilityOS Platform
.NET Framework and Visual Studio Remote Code Execution Vulnerability for Windows 10 Version 1607 for x64-based Systems (KB4487026) - DeltaWindows
.NET Framework and Visual Studio Remote Code Execution Vulnerability for Windows Server 2016 for x64-based Systems (KB4487026) - DeltaWindows
.NET Framework and Visual Studio Remote Code Execution Vulnerability for Windows Server 2016 for x64-based Systems (KB4487026) - CumulativeWindows
.NET Framework and Visual Studio Remote Code Execution Vulnerability for Windows 10 Version 1607 for x86-based Systems (KB4487026) - CumulativeWindows
.NET Framework and Visual Studio Remote Code Execution Vulnerability for Windows 10 Version 1607 for x86-based Systems (KB4487026) - DeltaWindows
.NET Framework and Visual Studio Remote Code Execution Vulnerability for Windows 10 Version 1607 for x64-based Systems (KB4487026) - CumulativeWindows
.NET Framework and Visual Studio Remote Code Execution Vulnerability for Windows 10 Version 1803 for x64-based Systems (KB4487017) - DeltaWindows
.NET Framework and Visual Studio Remote Code Execution Vulnerability for Windows Server 2016 (1803) for x64-based Systems (KB4487017) - DeltaWindows
.NET Framework and Visual Studio Remote Code Execution Vulnerability for Windows Server 2016 (1803) for x64-based Systems (KB4487017) - CumulativeWindows
.NET Framework and Visual Studio Remote Code Execution Vulnerability for Windows 10 Version 1803 for x86-based Systems (KB4487017) - DeltaWindows
.NET Framework and Visual Studio Remote Code Execution Vulnerability for Windows 10 Version 1803 for x64-based Systems (KB4487017) - CumulativeWindows
.NET Framework and Visual Studio Remote Code Execution Vulnerability for Windows 10 Version 1803 for x86-based Systems (KB4487017) - CumulativeWindows
Windows GDI Information Disclosure Vulnerability for Windows 8.1 for x86-based Systems (KB4487000)Windows
Windows GDI Information Disclosure Vulnerability for Windows Server 2012 R2 for x64-based Systems (KB4487000)Windows
Windows GDI Information Disclosure Vulnerability for Windows 8.1 for x64-based Systems (KB4487000)Windows
Windows GDI Information Disclosure Vulnerability for Windows Server 2012 for x64-based Systems (KB4487025)Windows
.NET Framework and Visual Studio Remote Code Execution Vulnerability for Windows Server 2016 (1709) for x64-based Systems (KB4486996) - CumulativeWindows
.NET Framework and Visual Studio Remote Code Execution Vulnerability for Windows 10 Version 1709 for x86-based Systems (KB4486996) - DeltaWindows
.NET Framework and Visual Studio Remote Code Execution Vulnerability for Windows 10 Version 1709 for x64-based Systems (KB4486996) - DeltaWindows
.NET Framework and Visual Studio Remote Code Execution Vulnerability for Windows Server 2016 (1709) for x64-based Systems (KB4486996) - DeltaWindows
.NET Framework and Visual Studio Remote Code Execution Vulnerability for Windows 10 Version 1709 for x86-based Systems (KB4486996) - CumulativeWindows
.NET Framework and Visual Studio Remote Code Execution Vulnerability for Windows 10 Version 1709 for x64-based Systems (KB4486996) - CumulativeWindows
Windows Security Feature Bypass Vulnerability for Windows 10 Version 1809 for x64-based Systems (KB4487044) - CumulativeWindows
Windows Security Feature Bypass Vulnerability for Windows Server 2019 for x64-based Systems (KB4487044) - CumulativeWindows
Windows Security Feature Bypass Vulnerability for Windows 10 Version 1809 for x86-based Systems (KB4487044) - CumulativeWindows
Windows GDI Information Disclosure Vulnerability for Windows Server 2008 for x64-based Systems (KB4487023)Windows
Windows GDI Information Disclosure Vulnerability for Windows Server 2008 for x86-based Systems (KB4487023)Windows
.NET Framework and Visual Studio Remote Code Execution Vulnerability for Windows 10 Version 1507 for x64-based Systems (KB4487018) - CumulativeWindows
.NET Framework and Visual Studio Remote Code Execution Vulnerability for Windows 10 Version 1507 for x86-based Systems (KB4487018) - CumulativeWindows
Internet Explorer Memory Corruption Vulnerability for Internet Explorer 11 for Windows Server 2008 R2 for x64-based systems (KB4486474) - CumulativeWindows
Internet Explorer Memory Corruption Vulnerability for Internet Explorer 11 for Windows 8.1 for x86-based systems (KB4486474) - CumulativeWindows
Internet Explorer Memory Corruption Vulnerability for Internet Explorer 11 for Windows Server 2012 R2 for x64-based systems (KB4486474) - CumulativeWindows
Internet Explorer Memory Corruption Vulnerability for Internet Explorer 10 for Windows Server 2012 for x64-based systems (KB4486474) - CumulativeWindows
Internet Explorer Memory Corruption Vulnerability for Internet Explorer 11 for Windows 8.1 for x64-based systems (KB4486474) - CumulativeWindows
Internet Explorer Memory Corruption Vulnerability for Internet Explorer 9 for Windows Server 2008 for x64-based systems (KB4486474) - CumulativeWindows
Internet Explorer Memory Corruption Vulnerability for Internet Explorer 9 for Windows Server 2008 for x86-based systems (KB4486474) - CumulativeWindows
Internet Explorer Memory Corruption Vulnerability for Internet Explorer 11 for Windows 7 for x86-based systems (KB4486474) - CumulativeWindows
Internet Explorer Memory Corruption Vulnerability for Internet Explorer 11 for Windows 7 for x64-based systems (KB4486474) - CumulativeWindows
Windows GDI Information Disclosure Vulnerability for Windows Server 2008 R2 for x64-based Systems (KB4486563)Windows
Windows GDI Information Disclosure Vulnerability for Windows 7 for x86-based Systems (KB4486563)Windows
Windows GDI Information Disclosure Vulnerability for Windows 7 for x64-based Systems (KB4486563)Windows
.NET Framework and Visual Studio Remote Code Execution Vulnerability for Windows 10 Version 1703 for x64-based Systems (KB4487020) - DeltaWindows
.NET Framework and Visual Studio Remote Code Execution Vulnerability for Windows 10 Version 1703 for x86-based Systems (KB4487020) - CumulativeWindows
.NET Framework and Visual Studio Remote Code Execution Vulnerability for Windows 10 Version 1703 for x86-based Systems (KB4487020) - DeltaWindows
.NET Framework and Visual Studio Remote Code Execution Vulnerability for Windows 10 Version 1703 for x64-based Systems (KB4487020) - CumulativeWindows
Microsoft XmlDocument Elevation of Privilege Vulnerability for Windows 10 Version 1703 for x64-based Systems (KB4487020)Windows
Microsoft XmlDocument Elevation of Privilege Vulnerability for Windows 10 Version 1703 for x86-based Systems (KB4487020)Windows
Microsoft XmlDocument Elevation of Privilege Vulnerability for Windows 10 Version 1703 for x86-based Systems (KB4487020)Windows
Microsoft XmlDocument Elevation of Privilege Vulnerability for Windows 10 Version 1703 for x64-based Systems (KB4487020)Windows
Microsoft XmlDocument Elevation of Privilege Vulnerability for Windows 10 Version 1703 for x64-based Systems (KB4487020)Windows
Microsoft XmlDocument Elevation of Privilege Vulnerability for Windows 10 Version 1703 for x86-based Systems (KB4487020)Windows
Microsoft XmlDocument Elevation of Privilege Vulnerability for Windows 10 Version 1703 for x86-based Systems (KB4487020)Windows
Microsoft XmlDocument Elevation of Privilege Vulnerability for Windows 10 Version 1703 for x64-based Systems (KB4487020)Windows

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-261562019-02 Delta Update for Windows 10 Version 1607 for x64-based Systems (KB4487026)
PATCH-261572019-02 Delta Update for Windows Server 2016 for x64-based Systems (KB4487026)
PATCH-261582019-02 Cumulative Update for Windows Server 2016 for x64-based Systems (KB4487026)
PATCH-261592019-02 Cumulative Update for Windows 10 Version 1607 for x86-based Systems (KB4487026)
PATCH-261602019-02 Delta Update for Windows 10 Version 1607 for x86-based Systems (KB4487026)
PATCH-261612019-02 Cumulative Update for Windows 10 Version 1607 for x64-based Systems (KB4487026)
PATCH-261742019-02 Delta Update for Windows 10 Version 1803 for x64-based Systems (KB4487017)
PATCH-261752019-02 Delta Update for Windows Server 2016 (1803) for x64-based Systems (KB4487017)
PATCH-261762019-02 Cumulative Update for Windows Server 2016 (1803) for x64-based Systems (KB4487017)
PATCH-261772019-02 Delta Update for Windows 10 Version 1803 for x86-based Systems (KB4487017)
PATCH-261782019-02 Cumulative Update for Windows 10 Version 1803 for x64-based Systems (KB4487017)
PATCH-261792019-02 Cumulative Update for Windows 10 Version 1803 for x86-based Systems (KB4487017)
PATCH-261072019-02 Security Monthly Quality Rollup for Windows 8.1 for x86-based Systems (KB4487000)
PATCH-261082019-02 Security Monthly Quality Rollup for Windows Server 2012 R2 for x64-based Systems (KB4487000)
PATCH-261092019-02 Security Monthly Quality Rollup for Windows 8.1 for x64-based Systems (KB4487000)
PATCH-261102019-02 Security Monthly Quality Rollup for Windows Server 2012 for x64-based Systems (KB4487025)
PATCH-261682019-02 Cumulative Update for Windows Server 2016 (1709) for x64-based Systems (KB4486996)
PATCH-261692019-02 Delta Update for Windows 10 Version 1709 for x86-based Systems (KB4486996)
PATCH-261702019-02 Delta Update for Windows 10 Version 1709 for x64-based Systems (KB4486996)
PATCH-261712019-02 Delta Update for Windows Server 2016 (1709) for x64-based Systems (KB4486996)
PATCH-261722019-02 Cumulative Update for Windows 10 Version 1709 for x86-based Systems (KB4486996)
PATCH-261732019-02 Cumulative Update for Windows 10 Version 1709 for x64-based Systems (KB4486996)
PATCH-261802019-02 Cumulative Update for Windows 10 Version 1809 for x64-based Systems (KB4487044)
PATCH-261812019-02 Cumulative Update for Windows Server 2019 for x64-based Systems (KB4487044)
PATCH-261822019-02 Cumulative Update for Windows 10 Version 1809 for x86-based Systems (KB4487044)
PATCH-261022019-02 Security Monthly Quality Rollup for Windows Server 2008 for x64-based Systems (KB4487023)
PATCH-261032019-02 Security Monthly Quality Rollup for Windows Server 2008 for x86-based Systems (KB4487023)
PATCH-261622019-02 Cumulative Update for Windows 10 Version 1507 for x64-based Systems (KB4487018)
PATCH-261632019-02 Cumulative Update for Windows 10 Version 1507 for x86-based Systems (KB4487018)
PATCH-260692019-02 Cumulative Security Update for Internet Explorer 11 for Windows Server 2008 R2 for x64-based systems (KB4486474)
PATCH-260702019-02 Cumulative Security Update for Internet Explorer 11 for Windows 8.1 for x86-based systems (KB4486474)
PATCH-260712019-02 Cumulative Security Update for Internet Explorer 11 for Windows Server 2012 R2 for x64-based systems (KB4486474)
PATCH-260722019-02 Cumulative Security Update for Internet Explorer 10 for Windows Server 2012 for x64-based systems (KB4486474)
PATCH-260732019-02 Cumulative Security Update for Internet Explorer 11 for Windows 8.1 for x64-based systems (KB4486474)
PATCH-260742019-02 Cumulative Security Update for Internet Explorer 9 for Windows Server 2008 for x64-based systems (KB4486474)
PATCH-260752019-02 Cumulative Security Update for Internet Explorer 9 for Windows Server 2008 for x86-based systems (KB4486474)
PATCH-260762019-02 Cumulative Security Update for Internet Explorer 11 for Windows 7 for x86-based systems (KB4486474)
PATCH-260772019-02 Cumulative Security Update for Internet Explorer 11 for Windows 7 for x64-based systems (KB4486474)
PATCH-261042019-02 Security Monthly Quality Rollup for Windows Server 2008 R2 for x64-based Systems (KB4486563)
PATCH-261052019-02 Security Monthly Quality Rollup for Windows 7 for x86-based Systems (KB4486563)
PATCH-261062019-02 Security Monthly Quality Rollup for Windows 7 for x64-based Systems (KB4486563)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234