VULNERABILITY INTELLIGENCE
CVE-2019-0938
CVSS score9 CRITICAL
EPSS probability3.44%
CISA KEVNot currently listed
Published2019-05-16
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Description
An elevation of privilege vulnerability exists in Microsoft Edge that could allow an attacker to escape from the AppContainer sandbox in the browser, aka 'Microsoft Edge Elevation of Privilege Vulnerability'.
Weakness classification
- nvd@nist.gov: NVD-CWE-noinfo
Primary references
- secure@microsoft.com — Patch, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory