Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
githubGitHub Advisory DatabaseGHSA-P23J-G745-8449
HistoryMar 29, 2021 - 8:55 p.m.

Out-of-bounds write

2021-03-2920:55:40
CWE-787
GitHub Advisory Database
github.com
37
remote code execution
memory corruption
chakra scripting engine
microsoft edge
cve

CVSS2

7.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.021

Percentile

89.3%

JSON

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka ‘Chakra Scripting Engine Memory Corruption Vulnerability’. This CVE ID is unique from CVE-2019-1307, CVE-2019-1308, CVE-2019-1366.

Affected configurations

Vulners
Node
microsoft.chakracoreRange<1.11.14

Related

veracode 4
prion 4
cve 4
osv 6
cvelist 4
nvd 4
github 3
kaspersky 1
threatpost 1
mscve 4
checkpoint_advisories 4
symantec 4
nessus 7
openvas 7
mskb 7
talosblog 1
veracode
veracode
Remote Code Execution (RCE)
2019-10-11 05:12:43
Remote Code Execution
2019-10-11 02:04:13
Remote Code Execution (RCE)
2019-10-11 03:12:05
prion
prion
Remote code execution
2019-10-10 14:15:00
Remote code execution
2019-10-10 14:15:00
Remote code execution
2019-10-10 14:15:00
cve
cve
CVE-2019-1335
2019-10-10 14:15:16
CVE-2019-1307
2019-10-10 14:15:15
CVE-2019-1308
2019-10-10 14:15:15
osv
osv
Out-of-bounds write
2021-03-29 20:55:46
CVE-2019-1308
2019-10-10 14:15:15
Out-of-bounds write
2021-03-29 20:55:36
cvelist
cvelist
CVE-2019-1335
2019-10-10 13:28:41
CVE-2019-1307
2019-10-10 13:28:40
CVE-2019-1366
2019-10-10 13:28:42
nvd
nvd
CVE-2019-1335
2019-10-10 14:15:16
CVE-2019-1307
2019-10-10 14:15:15
CVE-2019-1366
2019-10-10 14:15:18
github
github
Out-of-bounds write
2021-03-29 20:55:36
Out-of-bounds write
2021-03-29 20:55:52
Out-of-bounds write
2021-03-29 20:55:46
kaspersky
kaspersky
KLA11578 Multiple vulnerabilities in Microsoft Browsers
2019-10-08 00:00:00
threatpost
threatpost
Critical Microsoft Remote Desktop Flaw Fixed in Security Update
2019-10-08 19:55:56
mscve
mscve
Chakra Scripting Engine Memory Corruption Vulnerability
2019-10-08 07:00:00
Chakra Scripting Engine Memory Corruption Vulnerability
2019-10-08 07:00:00
Chakra Scripting Engine Memory Corruption Vulnerability
2019-10-08 07:00:00
checkpoint_advisories
checkpoint_advisories
Microsoft Edge Chakra Scripting Engine Memory Corruption (CVE-2019-1366)
2019-10-10 00:00:00
Microsoft Edge Chakra Scripting Engine Memory Corruption (CVE-2019-1335)
2019-10-09 00:00:00
Microsoft Edge Chakra Scripting Engine Memory Corruption (CVE-2019-1308)
2019-10-10 00:00:00
symantec
symantec
Microsoft Edge Chakra Scripting Engine CVE-2019-1335 Remote Memory Corruption Vulnerability
2019-10-08 00:00:00
Microsoft Edge Chakra Scripting Engine CVE-2019-1366 Remote Memory Corruption Vulnerability
2019-10-08 00:00:00
Microsoft Edge Chakra Scripting Engine CVE-2019-1307 Remote Memory Corruption Vulnerability
2019-10-08 00:00:00
nessus
nessus
KB4520011: Windows 10 October 2019 Security Update
2019-10-08 00:00:00
KB4520010: Windows 10 Version 1703 October 2019 Security Update
2019-10-08 00:00:00
KB4520004: Windows 10 Version 1709 October 2019 Security Update
2019-10-08 00:00:00
openvas
openvas
Microsoft Windows Multiple Vulnerabilities (KB4519998)
2019-10-09 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB4520011)
2019-10-09 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB4520004)
2019-10-09 00:00:00
mskb
mskb
October 8, 2019—KB4519998 (OS Build 14393.3274)
2019-11-12 08:00:00
October 8, 2019—KB4520011 (OS Build 10240.18368)
2019-11-12 08:00:00
October 8, 2019—KB4520004 (OS Build 16299.1451)
2019-11-12 08:00:00
talosblog
talosblog
Microsoft Patch Tuesday — Oct. 2019: Vulnerability disclosures and Snort coverage
2019-10-08 10:11:15

CVSS2

7.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.021

Percentile

89.3%

JSON
Related for GHSA-P23J-G745-8449
veracode4prion4cve4osv6cvelist4nvd4github3kaspersky1threatpost1mscve4checkpoint_advisories4symantec4nessus7openvas7mskb7talosblog1