{"id":"CVE-2019-0649","published":"2019-03-06T00:00:00Z","modified":"2024-08-04T17:51:26Z","title":"A vulnerability exists in Microsoft Chakra JIT server, aka 'Scripting Engine Elevation of Privileged Vulnerability'","vendor":"Microsoft","product":"Microsoft Edge","tier":"tail","description":{"text":"A vulnerability exists in Microsoft Chakra JIT server, aka 'Scripting Engine Elevation of Privileged Vulnerability'.","provenance":"source","from":"CVE.org"},"cvss":null,"epss":{"score":0.04345,"percentile":0.91198,"provenance":"source"},"cwes":[],"references":[{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0649","tags":["x_refsource_CONFIRM"]},{"url":"http://www.securityfocus.com/bid/106877","tags":["vdb-entry","x_refsource_BID"]}],"priority":{"score":18.2,"factors":[{"name":"EPSS percentile","points":18.24}]},"vendorSlug":"microsoft","affectedVersions":[{"vendor":"Microsoft","product":"Microsoft Edge","versions":["Windows 10 Version 1703 for 32-bit Systems","Windows 10 Version 1703 for x64-based Systems","Windows 10 Version 1709 for 32-bit Systems","Windows 10 Version 1709 for x64-based Systems","Windows 10 Version 1803 for 32-bit Systems","Windows 10 Version 1803 for x64-based Systems","Windows 10 Version 1803 for ARM64-based Systems","Windows 10 Version 1809 for 32-bit Systems","Windows 10 Version 1809 for x64-based Systems","Windows 10 Version 1809 for ARM64-based Systems"]}],"affected":[{"ecosystem":"NuGet","package":"Microsoft.ChakraCore","vulnerableRanges":["<1.11.6"],"patched":["1.11.6"],"from":["GHSA-6c6r-39cv-x5fq"],"provenance":"source"}],"euvd":{"id":"EUVD-2022-2768","exploited":false,"provenance":"source"},"lineage":{"packageHistory":[{"cve":"CVE-2019-0567","published":"2019-01-08","fixed":"1.11.5","kev":false},{"cve":"CVE-2019-0568","published":"2019-01-08","fixed":"1.11.5","kev":false,"link":{"from":"CVE-2019-0568","to":"CVE-2019-0649","relation":"successor","confidence":"medium","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"NuGet:Microsoft.ChakraCore","fromFixed":"1.11.5","toFixed":"1.11.6","daysApart":57},{"kind":"similar","provenance":"machine","score":0.5,"basis":"same product + description similarity"}]}},{"cve":"CVE-2019-0648","published":"2019-03-06","fixed":"1.11.6","kev":false},{"cve":"CVE-2019-0649","published":"2019-03-06","fixed":"1.11.6","kev":false},{"cve":"CVE-2019-0592","published":"2019-04-08","fixed":"1.11.7","kev":false},{"cve":"CVE-2019-0609","published":"2019-04-08","fixed":"1.11.7","kev":false},{"cve":"CVE-2019-0611","published":"2019-04-08","fixed":"1.11.7","kev":false}],"package":"NuGet:Microsoft.ChakraCore"}}