2209 matches found
Chakra Scripting Engine Memory Corruption Vulnerability
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge HTML-based. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who...
Chakra Scripting Engine Memory Corruption Vulnerability
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge HTML-based. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who...
Chakra Scripting Engine Memory Corruption Vulnerability
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge HTML-based. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who...
Chakra Scripting Engine Memory Corruption Vulnerability
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge HTML-based. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who...
Microsoft Edge Chakra Scripting Engine Memory Corruption (CVE-2019-1092)
...
Microsoft Edge Chakra Scripting Engine Memory Corruption (CVE-2019-1062)
...
KB4507455: Windows 10 Version 1709 July 2019 Security Update (SWAPGS)
The remote Windows host is missing security update 4507455. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary co...
Microsoft Edge Chakra Scripting Engine Memory Corruption (CVE-2019-1103)
...
KLA11514 Multiple vulnerabilities in Microsoft Browsers
Multiple vulnerabilities were found in Microsoft Browsers. Malicious users can exploit these vulnerabilities to execute arbitrary code. Below is a complete list of vulnerabilities: 1. A memory corruption vulnerability in Scripting Engine can be exploited remotely via specially crafted website to...
KB4507460: Windows 10 Version 1607 and Windows Server 2016 July 2019 Security Update (SWAPGS)
The remote Windows host is missing security update 4507460. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary co...
KB4507469: Windows 10 Version 1809 and Windows Server 2019 July 2019 Security Update (SWAPGS)
The remote Windows host is missing security update 4507469. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file. An attacker who successfully exploited the vulnerabili...
Microsoft Edge Chakra Scripting Engine Memory Corruption (CVE-2019-1106)
...
Microsoft Edge Chakra Scripting Engine Memory Corruption (CVE-2019-1107)
...
KB4507450: Windows 10 Version 1703 July 2019 Security Update (SWAPGS)
The remote Windows host is missing security update 4507450. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary co...
Microsoft Browser Chakra Scripting Engine Memory Corruption (CVE-2019-1001)
...
KB4507435: Windows 10 Version 1803 July 2019 Security Update (SWAPGS)
The remote Windows host is missing security update 4507435. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary co...
chakra: Crash in int JsUtil::BaseDictionary<void*, unsigned int, Memory::RecyclerNonLeafAllocator
Detailed report: https://oss-fuzz.com/testcase?key=5727599193489408 Project: chakra Fuzzer: jsfuzzer Job Type: asanchakra Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00008fff8800 Crash State: int JsUtil::BaseDictionary :: Sanitizer: address ASAN Regressed:...
Information Disclosure
Chakra Core is vulnerable to information disclosure. It is because the scripting engine does not properly handle objects in memory. An attacker thus could craft a malicious website and gather users' system information when the users enter the website...
Microsoft Edge Buffer Overflow Vulnerability (CNVD-2019-27396)
Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. A buffer overflow vulnerability exists in the way the Chakra scripting engine in Microsoft Edge handles in-memory objects. The vulnerability originates when a web system or product perfor...
Microsoft Edge Chakra Scripting Engine Remote Memory Corruption Vulnerability (CNVD-2019-24845)
Microsoft Edge is Microsoft's new browser, migrating from the EdgeHTML kernel to the Chromium kernel, and will also be coming to Windows 7/8/8.1 and macOS platforms. A remote memory corruption vulnerability exists in Microsoft Edge Chakra Scripting Engine, which can be exploited by an attacker to...