CVE-2019-1001

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2019-1001
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-1001.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2019-1001
Published
2019-07-15T19:15:16.217Z
Modified
2026-07-08T05:54:42.510641460Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1004, CVE-2019-1056, CVE-2019-1059.

Database specific 
{
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "introduced": "11-NA"
                },
                {
                    "last_affected": "11-NA"
                }
            ],
            "source": "CPE_STRING",
            "vendor_product": "microsoft:internet_explorer",
            "cpes": [
                "cpe:2.3:a:microsoft:internet_explorer:11:-:*:*:*:*:*:*"
            ]
        }
    ]
}
References

Affected packages

Git / github.com/chakra-core/chakracore

Affected ranges

Type
GIT
Repo
https://github.com/chakra-core/chakracore
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
75162b7f2d8ac2b37d17564e9c979ba1bae707e8
Database specific 
{
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "1.11.11"
        }
    ],
    "source": "CPE_RANGE",
    "cpe": "cpe:2.3:a:microsoft:chakracore:*:*:*:*:*:*:*:*"
}

Affected versions

v1.*
v1.10.0
v1.10.1
v1.10.2
v1.11.0
v1.11.1
v1.11.10
v1.11.2
v1.11.3
v1.11.4
v1.11.5
v1.11.6
v1.11.7
v1.11.8
v1.11.9

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-1001.json"