Lucene search
GoogleOSV:GHSA-W4MJ-XWVW-382FHistoryMay 14, 2022 - 2:22 a.m.
ChakraCore RCE Vulnerability
2022-05-1402:22:45
Google
osv.dev
6
0.959 High
EPSS
Percentile
99.5%
The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka “Scripting Engine Memory Corruption Vulnerability,” a different vulnerability than CVE-2016-3386, CVE-2016-3389, and CVE-2016-7194.
| CPE | Name | Operator | Version |
|---|---|---|---|
| microsoft.chakracore | eq | 1.2.0 | |
| microsoft.chakracore | eq | 1.2.1 |
References
docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-119
github.com/chakra-core/ChakraCore
github.com/chakra-core/ChakraCore/commit/f05c42e64c3b2d057ae1a52fe1917af26c9f2737
github.com/chakra-core/ChakraCore/wiki/Roadmap
nvd.nist.gov/vuln/detail/CVE-2016-7190
web.archive.org/web/20210621142234/www.securityfocus.com/bid/93428
web.archive.org/web/20211208062350/www.securitytracker.com/id/1036993
Related
cve
cve
osv
osv
ChakraCore RCE Vulnerability
2022-05-14 02:23:11
ChakraCore RCE Vulnerability
2022-05-14 02:22:45
ChakraCore RCE Vulnerability
2022-05-14 02:23:11
cvelist
cvelist
nvd
nvd
prion
prion
Memory corruption
2016-10-14 02:59:00
Memory corruption
2016-10-14 02:59:00
Memory corruption
2016-10-14 02:59:00
github
github
ChakraCore RCE Vulnerability
2022-05-14 02:23:11
ChakraCore RCE Vulnerability
2022-05-14 02:22:45
ChakraCore RCE Vulnerability
2022-05-14 02:23:11
checkpoint_advisories
checkpoint_advisories
Microsoft Edge Scripting Engine Memory Corruption (MS16-119: CVE-2016-7190)
2016-10-11 00:00:00
Microsoft Scripting Engine Memory Corruption (MS16-119: CVE-2016-7194)
2016-10-11 00:00:00
Microsoft Edge Memory Corruption (MS16-119: CVE-2016-3386)
2016-10-11 00:00:00
symantec
symantec
nessus
nessus
MS16-119: Cumulative Security Update for Microsoft Edge (3192890)
2016-10-11 00:00:00
mscve
mscve
Scripting Engine Memory Corruption Vulnerability
2016-10-11 07:00:00
Scripting Engine Memory Corruption Vulnerability
2016-10-11 07:00:00
openvas
openvas
Microsoft Edge Multiple Vulnerabilities (3192890)
2016-10-12 00:00:00
mskb
mskb
MS16-119: Cumulative security update for Microsoft Edge: October 11, 2016
2016-10-11 00:00:00
Cumulative update for Windows 10 Version 1607 and Windows Server 2016: October 11, 2016
2016-10-11 07:00:00
Cumulative update for Windows 10 Version 1511: October 11, 2016
2016-10-11 07:00:00
zdi
zdi
kaspersky
kaspersky
KLA10885 Multiple vulnerabilities in Microsoft Edge and Internet Explorer
2016-10-11 00:00:00