CVE-2019-0608 - CVE House

Status published Medium CVE-2019-0608

A spoofing vulnerability exists when Microsoft Browsers does not properly...

4.3 CVSS

Vulnerability Description

A spoofing vulnerability exists when Microsoft Browsers does not properly parse HTTP content, aka 'Microsoft Browser Spoofing Vulnerability'. This CVE ID is unique from CVE-2019-1357.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-0608

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0608

More from Microsoft

View All →

CVE-2025-9611

Microsoft Playwright MCP Server < 0.0.40 DNS Rebinding via Missing Origin Header Validation

High 7.2

CVE-2025-9491

Microsoft Windows LNK File UI Misrepresentation Remote Code Execution Vulnerability

High 7

CVE-2025-7326

EOL ASP.NET Core Elevation of Privilege Vulnerability

High 7

CVE-2025-65046

Microsoft Edge (Chromium-based) Spoofing Vulnerability

Low 3.1

CVE-2025-65041

Microsoft Partner Center Elevation of Privilege Vulnerability

Critical 10

Affected Vendor

Microsoft

View all reports →

Affected Software

Internet Explorer 9, Internet Explorer 11, Internet Explorer 11 on Windows Server 2012, Internet Explorer 11 on Windows 10 Version 1903 for 32-bit Systems, Internet Explorer 11 on Windows 10 Version 1903 for x64-based Systems, Internet Explorer 11 on Windows 10 Version 1903 for ARM64-based Systems, Internet Explorer 10, Microsoft Edge (EdgeHTML-based) on Windows 10 for 32-bit Systems, Microsoft Edge (EdgeHTML-based) on Windows 10 for x64-based Systems, Microsoft Edge (EdgeHTML-based) on Windows Server 2016, Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for 32-bit Systems, Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for x64-based Systems, Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1703 for 32-bit Systems, Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1703 for x64-based Systems, Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1709 for 32-bit Systems, Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1709 for x64-based Systems, Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for 32-bit Systems, Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for x64-based Systems, Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for ARM64-based Systems, Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for 32-bit Systems, Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for x64-based Systems, Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for ARM64-based Systems, Microsoft Edge (EdgeHTML-based) on Windows Server 2019, Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1709 for ARM64-based Systems, Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1903 for 32-bit Systems, Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1903 for x64-based Systems, Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1903 for ARM64-based Systems

Vulnerable Versions:

Windows Server 2008 for 32-bit Systems Service Pack 2, Windows Server 2008 for x64-based Systems Service Pack 2, Windows 7 for 32-bit Systems Service Pack 1, Windows 7 for x64-based Systems Service Pack 1, Windows Server 2008 R2 for x64-based Systems Service Pack 1, Windows 8.1 for 32-bit systems, Windows 8.1 for x64-based systems, Windows Server 2012 R2, Windows RT 8.1, Windows 10 for 32-bit Systems, Windows 10 for x64-based Systems, Windows Server 2016, Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1703 for 32-bit Systems, Windows 10 Version 1703 for x64-based Systems, Windows 10 Version 1709 for 32-bit Systems, Windows 10 Version 1709 for x64-based Systems, Windows 10 Version 1803 for 32-bit Systems, Windows 10 Version 1803 for x64-based Systems, Windows 10 Version 1803 for ARM64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 1809 for ARM64-based Systems, Windows Server 2019, Windows 10 Version 1709 for ARM64-based Systems, unspecified, Windows Server 2012

Timeline

Official Publish: October 10th, 2019

Last Modified: August 4th, 2024

Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.