CVE-2019-0762

Description

A security feature bypass vulnerability exists when Microsoft browsers improperly handle requests of different origins, aka Microsoft Browsers Security Feature Bypass Vulnerability.

Risk Information

Base Score
4.4
MODERATE
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
EPSS Score
Exploitation Probability
4.465

Associated Vulnerability

VulnerabilityOS Platform
HID Information Disclosure Vulnerability for Windows 10 Version 1709 for x64-based Systems (KB4489886) - DeltaWindows
HID Information Disclosure Vulnerability for Windows 10 Version 1709 for x64-based Systems (KB4489886) - CumulativeWindows
HID Information Disclosure Vulnerability for Windows Server 2016 (1709) for x64-based Systems (KB4489886) - CumulativeWindows
HID Information Disclosure Vulnerability for Windows Server 2016 (1709) for x64-based Systems (KB4489886) - DeltaWindows
HID Information Disclosure Vulnerability for Windows 10 Version 1709 for x86-based Systems (KB4489886) - CumulativeWindows
HID Information Disclosure Vulnerability for Windows 10 Version 1709 for x86-based Systems (KB4489886) - DeltaWindows
Windows VBScript Engine Remote Code Execution Vulnerability for Windows Server 2019 for x64-based Systems (KB4489899) - CumulativeWindows
Windows VBScript Engine Remote Code Execution Vulnerability for Windows 10 Version 1809 for x64-based Systems (KB4489899) - CumulativeWindows
Windows VBScript Engine Remote Code Execution Vulnerability for Windows 10 Version 1809 for x86-based Systems (KB4489899) - CumulativeWindows
Windows VBScript Engine Remote Code Execution Vulnerability for Windows Server 2016 (1803) for x64-based Systems (KB4489868) - CumulativeWindows
Windows VBScript Engine Remote Code Execution Vulnerability for Windows 10 Version 1803 for x86-based Systems (KB4489868) - DeltaWindows
Windows VBScript Engine Remote Code Execution Vulnerability for Windows Server 2016 (1803) for x64-based Systems (KB4489868) - DeltaWindows
Windows VBScript Engine Remote Code Execution Vulnerability for Windows 10 Version 1803 for x64-based Systems (KB4489868) - DeltaWindows
Windows VBScript Engine Remote Code Execution Vulnerability for Windows 10 Version 1803 for x86-based Systems (KB4489868) - CumulativeWindows
Windows VBScript Engine Remote Code Execution Vulnerability for Windows 10 Version 1803 for x64-based Systems (KB4489868) - CumulativeWindows
HID Information Disclosure Vulnerability for Windows 8.1 for x64-based Systems (KB4489881)Windows
HID Information Disclosure Vulnerability for Windows 8.1 for x86-based Systems (KB4489881)Windows
HID Information Disclosure Vulnerability for Windows Server 2012 R2 for x64-based Systems (KB4489881)Windows
HID Information Disclosure Vulnerability for Windows 7 for x86-based Systems (KB4489878)Windows
HID Information Disclosure Vulnerability for Windows Server 2008 R2 for x64-based Systems (KB4489878)Windows
HID Information Disclosure Vulnerability for Windows 7 for x64-based Systems (KB4489878)Windows
Chakra Scripting Engine Memory Corruption Vulnerability for Internet Explorer 9 for Windows Server 2008 for x86-based systems (KB4489873) - CumulativeWindows
Chakra Scripting Engine Memory Corruption Vulnerability for Internet Explorer 11 for Windows Server 2012 R2 for x64-based systems (KB4489873) - CumulativeWindows
Chakra Scripting Engine Memory Corruption Vulnerability for Internet Explorer 9 for Windows Server 2008 for x64-based systems (KB4489873) - CumulativeWindows
Chakra Scripting Engine Memory Corruption Vulnerability for Internet Explorer 10 for Windows Server 2012 for x64-based systems (KB4489873) - CumulativeWindows
Chakra Scripting Engine Memory Corruption Vulnerability for Internet Explorer 11 for Windows Server 2008 R2 for x64-based systems (KB4489873) - CumulativeWindows
Chakra Scripting Engine Memory Corruption Vulnerability for Internet Explorer 11 for Windows 8.1 for x86-based systems (KB4489873) - CumulativeWindows
Chakra Scripting Engine Memory Corruption Vulnerability for Internet Explorer 11 for Windows 7 for x64-based systems (KB4489873) - CumulativeWindows
Chakra Scripting Engine Memory Corruption Vulnerability for Internet Explorer 11 for Windows 8.1 for x64-based systems (KB4489873) - CumulativeWindows
Chakra Scripting Engine Memory Corruption Vulnerability for Internet Explorer 11 for Windows 7 for x86-based systems (KB4489873) - CumulativeWindows

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-263332019-03 Delta Update for Windows 10 Version 1709 for x64-based Systems (KB4489886)
PATCH-263342019-03 Cumulative Update for Windows 10 Version 1709 for x64-based Systems (KB4489886)
PATCH-263352019-03 Cumulative Update for Windows Server 2016 (1709) for x64-based Systems (KB4489886)
PATCH-263362019-03 Delta Update for Windows Server 2016 (1709) for x64-based Systems (KB4489886)
PATCH-263372019-03 Cumulative Update for Windows 10 Version 1709 for x86-based Systems (KB4489886)
PATCH-263382019-03 Delta Update for Windows 10 Version 1709 for x86-based Systems (KB4489886)
PATCH-263452019-03 Cumulative Update for Windows Server 2019 for x64-based Systems (KB4489899)
PATCH-263462019-03 Cumulative Update for Windows 10 Version 1809 for x64-based Systems (KB4489899)
PATCH-263472019-03 Cumulative Update for Windows 10 Version 1809 for x86-based Systems (KB4489899)
PATCH-263392019-03 Cumulative Update for Windows Server 2016 (1803) for x64-based Systems (KB4489868)
PATCH-263402019-03 Delta Update for Windows 10 Version 1803 for x86-based Systems (KB4489868)
PATCH-263412019-03 Delta Update for Windows Server 2016 (1803) for x64-based Systems (KB4489868)
PATCH-263422019-03 Delta Update for Windows 10 Version 1803 for x64-based Systems (KB4489868)
PATCH-263432019-03 Cumulative Update for Windows 10 Version 1803 for x86-based Systems (KB4489868)
PATCH-263442019-03 Cumulative Update for Windows 10 Version 1803 for x64-based Systems (KB4489868)
PATCH-263152019-03 Security Monthly Quality Rollup for Windows 8.1 for x64-based Systems (KB4489881)
PATCH-263162019-03 Security Monthly Quality Rollup for Windows 8.1 for x86-based Systems (KB4489881)
PATCH-263172019-03 Security Monthly Quality Rollup for Windows Server 2012 R2 for x64-based Systems (KB4489881)
PATCH-263122019-03 Security Monthly Quality Rollup for Windows 7 for x86-based Systems (KB4489878)
PATCH-263132019-03 Security Monthly Quality Rollup for Windows Server 2008 R2 for x64-based Systems (KB4489878)
PATCH-263142019-03 Security Monthly Quality Rollup for Windows 7 for x64-based Systems (KB4489878)
PATCH-262962019-03 Cumulative Security Update for Internet Explorer 9 for Windows Server 2008 for x86-based systems (KB4489873)
PATCH-262972019-03 Cumulative Security Update for Internet Explorer 11 for Windows Server 2012 R2 for x64-based systems (KB4489873)
PATCH-262982019-03 Cumulative Security Update for Internet Explorer 9 for Windows Server 2008 for x64-based systems (KB4489873)
PATCH-262992019-03 Cumulative Security Update for Internet Explorer 10 for Windows Server 2012 for x64-based systems (KB4489873)
PATCH-263002019-03 Cumulative Security Update for Internet Explorer 11 for Windows Server 2008 R2 for x64-based systems (KB4489873)
PATCH-263012019-03 Cumulative Security Update for Internet Explorer 11 for Windows 8.1 for x86-based systems (KB4489873)
PATCH-263022019-03 Cumulative Security Update for Internet Explorer 11 for Windows 7 for x64-based systems (KB4489873)
PATCH-263032019-03 Cumulative Security Update for Internet Explorer 11 for Windows 8.1 for x64-based systems (KB4489873)
PATCH-263042019-03 Cumulative Security Update for Internet Explorer 11 for Windows 7 for x86-based systems (KB4489873)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234