Lucene search
+L

2443 matches found

Github Security Blog
Github Security Blog
added 2022/05/17 12:19 a.m.37 views

Chakra Core vulnerable to privilege escalation due to type confusion

ChakraCore and Microsoft Edge in Windows 10 1709 and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". Individual Export in module...

7.6CVSS7AI score0.07912EPSS
SaveExploits0References7Affected Software1
OSV
OSV
added 2022/05/17 12:19 a.m.30 views

GHSA-43QP-HPHF-5RJW Chakra Core vulnerable to privilege escalation due to reading an invalid pointer

ChakraCore and Microsoft Edge in Windows 10 1703, 1709, and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". When trying to get...

7.5CVSS7.6AI score0.07979EPSS
SaveExploits0References7
Github Security Blog
Github Security Blog
added 2022/05/17 12:11 a.m.43 views

ChakraCore vulnerable to remote code execution due to insufficient InlineCache check

ChakraCore and Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". An insufficient...

7.6CVSS7.5AI score0.08643EPSS
SaveExploits0References7Affected Software1
Github Security Blog
Github Security Blog
added 2022/05/17 12:11 a.m.26 views

ChakraCore RCE Vulnerability

ChakraCore and Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11886, CVE-2017-11889,...

7.6CVSS7.4AI score0.08643EPSS
SaveExploits0References7Affected Software1
Github Security Blog
Github Security Blog
added 2022/05/14 4:04 a.m.27 views

ChakraCore RCE Vulnerability

ChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ...

7.6CVSS7.3AI score0.08643EPSS
SaveExploits0References7Affected Software1
Github Security Blog
Github Security Blog
added 2022/05/14 1:06 a.m.24 views

ChakraCore vulnerable to privilege escalation due to exposure from scriptFunction

ChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". The...

7.6CVSS7AI score0.62646EPSS
SaveExploits5References8Affected Software1
Github Security Blog
Github Security Blog
added 2022/05/14 1:06 a.m.38 views

ChakraCore vulnerable to remote code execution

ChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability"...

7.6CVSS7.4AI score0.68491EPSS
SaveExploits4References8Affected Software1
OSV
OSV
added 2022/05/13 1:21 a.m.22 views

GHSA-QXMJ-3C5H-546C ChakraCore Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0806, CVE-2019-0810, CVE-2019-0812, CVE-2019-0829, CVE-2019-0860...

7.5CVSS6.6AI score0.11107EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
added 2022/05/13 1:21 a.m.32 views

ChakraCore Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0806, CVE-2019-0810, CVE-2019-0812, CVE-2019-0829, CVE-2019-0860...

7.6CVSS7AI score0.11107EPSS
SaveExploits0References6Affected Software1
OSV
OSV
added 2022/05/13 1:21 a.m.18 views

GHSA-FV87-P7QR-XH5X ChakraCore Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0806, CVE-2019-0810, CVE-2019-0812, CVE-2019-0829, CVE-2019-0861...

7.5CVSS6.6AI score0.10799EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
added 2022/05/13 1:21 a.m.29 views

ChakraCore Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0806, CVE-2019-0810, CVE-2019-0812, CVE-2019-0829, CVE-2019-0861...

7.6CVSS7AI score0.10799EPSS
SaveExploits0References6Affected Software1
OSV
OSV
added 2022/05/13 1:21 a.m.23 views

GHSA-5RQ3-9WC9-M9C3 ChakraCore Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0806, CVE-2019-0810, CVE-2019-0812, CVE-2019-0860, CVE-2019-0861...

7.5CVSS6.6AI score0.08957EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
added 2022/05/13 1:21 a.m.26 views

ChakraCore Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0806, CVE-2019-0810, CVE-2019-0812, CVE-2019-0860, CVE-2019-0861...

7.6CVSS7AI score0.08957EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2022/05/13 1:21 a.m.28 views

GHSA-2MMC-5PHJ-4WJJ ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0806, CVE-2019-0812, CVE-2019-0829, CVE-2019-0860, CVE-2019-0861...

7.5CVSS6.6AI score0.11532EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
added 2022/05/13 1:21 a.m.26 views

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8583, CVE-2018-8617,...

7.6CVSS7AI score0.22466EPSS
SaveExploits0References6Affected Software1
Github Security Blog
Github Security Blog
added 2022/05/13 1:21 a.m.35 views

ChakraCore Remote code execution Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8583, CVE-2018-8617,...

7.6CVSS7AI score0.12965EPSS
SaveExploits0References7Affected Software1
Github Security Blog
Github Security Blog
added 2022/05/13 1:21 a.m.35 views

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8583, CVE-2018-8618,...

7.6CVSS7AI score0.62483EPSS
SaveExploits4References7Affected Software1
OSV
OSV
added 2022/05/13 1:20 a.m.27 views

GHSA-RHVG-R9FW-9WQJ ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8541, CVE-2018-8542,...

7.5CVSS6.7AI score0.14159EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
added 2022/05/13 1:20 a.m.27 views

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8541, CVE-2018-8542,...

7.6CVSS7AI score0.14159EPSS
SaveExploits0References7Affected Software1
OSV
OSV
added 2022/05/13 1:20 a.m.24 views

GHSA-788W-269G-J92Q ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore. This CVE ID is unique from CVE-2018-8354, CVE-2018-8456, CVE-2018-8457, CVE-2018-8459...

7.5CVSS6.7AI score0.10974EPSS
SaveExploits0References4
Rows per page
Query Builder