CRITICAL✓ PATCH🇵🇱 Wersja polska

CVE-2019-0938

CVSS 9.0v3.0pub. 2019-05-16upd. 2024-11-21

An elevation of privilege vulnerability exists in Microsoft Edge that could allow an attacker to escape from the AppContainer sandbox in the browser, aka 'Microsoft Edge Elevation of Privilege Vulnerability'.

CVSS Vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

  • Microsoft Edge

    APP
    Microsoft
    all versions

  • Microsoft Windows 10

    OS
    Microsoft
    160717031709180318091903

  • Microsoft Windows Server 2016

    OS
    Microsoft
    all versions

  • Microsoft Windows Server 2019

    OS
    Microsoft
    all versions
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Tags
Container
CWE
References

Related vulnerabilities

CVE-2026-33824CRITICAL9.8⚠ KEVPL ✓same product

Double free w Windows IKE Extension umożliwia zdalne wykonanie kodu

CVE-2025-59287CRITICAL9.8⚠ KEVPL ✓same product

RCE w Windows Server Update Service (WSUS) — deserializacja danych

CVE-2024-7971CRITICAL9.6⚠ KEVPL ✓same product

Type confusion w V8 (Google Chrome/Edge) umożliwiający heap corruption

CVE-2022-4135CRITICAL9.6⚠ KEVPL ✓same product

Heap buffer overflow w GPU w Google Chrome — sandbox escape

CVE-2020-1350CRITICAL10.0⚠ KEVPL ✓same product

RCE w Windows DNS Server — krytyczna podatność SIGRed (CVSS 10.0)