What is CVE-2019-0566?

CVE-2019-0566 is a security advisory published by Microsoft Security Response Center (MSRC) with High severity. Microsoft Edge Elevation of Privilege Vulnerability

Which CVE IDs does CVE-2019-0566 cover?

CVE-2019-0566 covers the following CVE IDs: CVE-2019-0566. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of CVE-2019-0566?

CVE-2019-0566 has a CVSS v3 base score of 4.3, published by Microsoft Security Response Center (MSRC).

Which products are affected by CVE-2019-0566?

CVE-2019-0566 affects 17 products, including: Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for 32-bit Systems; Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for x64-based Systems; Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1703 for 32-bit Systems; Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1703 for x64-based Systems; Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1709 for 32-bit Systems; and others — see the full list on the advisory page.

CVE-2019-0566HighCVSS 4.3

Microsoft Edge Elevation of Privilege Vulnerability

Vendor

Microsoft Security Response Center (MSRC)

Published

January 8, 2019

Last Modified

—

🔗 CVE IDs covered (1)

CVE-2019-0566 →

📋 Description

An elevation of privilege vulnerability exists in Microsoft Edge Browser Broker COM object. An attacker who successfully exploited the vulnerability could use the Browser Broker COM object to elevate privileges on an affected system. This vulnerability by itself does not allow arbitrary code execution; however, it could allow arbitrary code to be run if the attacker uses it in combination with another vulnerability (such as a remote code execution vulnerability or another elevation of privilege vulnerability) that is capable of leveraging the elevated privileges when code execution is attempted.

🎯 Affected products17

Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for 32-bit Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for x64-based Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1703 for 32-bit Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1703 for x64-based Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1709 for 32-bit Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1709 for ARM64-based Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1709 for x64-based Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for 32-bit Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for ARM64-based Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for x64-based Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for 32-bit Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for ARM64-based Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for x64-based Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 for 32-bit Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 for x64-based Systems
Microsoft Edge (EdgeHTML-based) on Windows Server 2016
Microsoft Edge (EdgeHTML-based) on Windows Server 2019

✅ Remediation

KB4480973 (Security Update) KB4480966 (Security Update) KB4480116 (Security Update) KB4480978 (Security Update) KB4480962 (Security Update) KB4480961 (Security Update)

🔗 CVE IDs covered (1)

📋 Description

🎯 Affected products17

✅ Remediation

🔗 References (13)