Lucene search
+L

15 matches found

CNVD
CNVD
•added 2019/05/17 12:00 a.m.•26 views

Microsoft Edge and ChakraCore Buffer Overflow Vulnerability (CNVD-2019-27401)

Microsoft ChakraCore and Microsoft Edge are both products of Microsoft Corporation.ChakraCore is the core of an open-source Chakra JavaScript scripting engine used in the Edge browser, and is also available as a standalone JavaScript engine. Microsoft Edge is a web browser that comes with Windows...

7.6CVSS6.9AI score0.09215EPSS
SaveExploits0References1
CNVD
CNVD
•added 2019/03/14 12:00 a.m.•21 views

Microsoft Edge and ChakraCore Buffer Overflow Vulnerability (CNVD-2019-27404)

Microsoft ChakraCore and Microsoft Edge are both products of Microsoft Corporation.ChakraCore is the core of an open-source Chakra JavaScript scripting engine used in the Edge browser, and is also available as a standalone JavaScript engine. Microsoft Edge is a web browser that comes with Windows...

7.6CVSS7.5AI score0.12047EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2019/03/01 12:00 a.m.•36 views

The vulnerability in the JavaScript ChakraCore engine of the Microsoft Edge browser allows a hacker to execute arbitrary code.

The vulnerability of Microsoft Edge’s JavaScript ChakraCore engine is related to memory object handling flaws. Exploiting this vulnerability can allow a remote attacker to trigger memory corruption and execute arbitrary code through a specially crafted web page...

9.6CVSS7.2AI score0.19784EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2019/02/12 12:00 a.m.•3 views

PT-2019-1475

Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description The issue is related to insufficient handling of objects in memory by the JavaScript ChakraCore engine in Microsoft Edge. This could allow a remote attacker to cause memory damage and...

9.3CVSS0.11107EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2019/02/12 12:00 a.m.•3 views

PT-2019-1478

Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description The issue is related to insufficient handling of objects in memory by the JavaScript ChakraCore engine in Microsoft Edge. This could allow a remote attacker to cause memory damage and...

9.3CVSS0.11107EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2019/02/12 12:00 a.m.•4 views

PT-2019-1476

Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description The issue is related to insufficient handling of objects in memory by the JavaScript ChakraCore engine in Microsoft Edge. This could allow a remote attacker to cause memory damage and...

9.3CVSS0.11107EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
•added 2018/12/28 12:00 a.m.•18 views

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser allows a hacker to execute arbitrary code in the context of the current user.

The vulnerability of the ChakraCore JavaScript script handler in the Microsoft Edge browser is caused by an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, through a...

4.2CVSS7.9AI score0.22599EPSS
SaveExploits0References3Affected Software1
Microsoft CVE
Microsoft CVE
•added 2018/09/11 7:00 a.m.•36 views

Scripting Engine Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the...

7.6CVSS2.5AI score0.14558EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2018/03/21 12:00 a.m.•15 views

The vulnerability of Microsoft Edge browser and the ChakraCore JavaScript engine handler involves improper handling of objects in memory, allowing an attacker to trigger memory corruption and execute arbitrary code.

The vulnerability of Microsoft Edge browser and the JavaScript script handler ChakraCore is related to improper handling of objects in memory. Exploiting this vulnerability can allow a remote attacker to trigger memory corruption and execute arbitrary code using a specially crafted web page...

7.6CVSS7.7AI score0.1543EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2018/03/13 12:00 a.m.•2 views

PT-2018-1132

Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description The issue is caused by a buffer overflow in memory due to improper handling of JavaScript scripts by the ChakraCore engine and Microsoft Edge browser. This could allow a remote attacke...

7.6CVSS0.66313EPSS
SaveExploits4References14
Positive Technologies
Positive Technologies
•added 2018/03/13 12:00 a.m.•1 views

PT-2018-1140

Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description The issue is caused by a buffer overflow in memory due to improper handling of JavaScript scripts by the ChakraCore engine and Microsoft Edge browser. This could allow a remote attacke...

7.6CVSS0.15747EPSS
SaveExploits0References11
Positive Technologies
Positive Technologies
•added 2018/03/13 12:00 a.m.•1 views

PT-2018-1128

Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description The issue is caused by a buffer overflow in memory due to improper handling of JavaScript scripts by the ChakraCore engine and Microsoft Edge browser. This could allow a remote attacke...

7.6CVSS0.1543EPSS
SaveExploits0References11
CNVD
CNVD
•added 2018/02/14 12:00 a.m.•16 views

Microsoft Edge and ChakraCore Remote Memory Corruption Vulnerability (CNVD-2018-03513)

Microsoft Windows is a series of operating systems released by Microsoft Corporation.Edge is one of the browsers that comes with the system.ChakraCore is the core of an open source JavaScript engine used in Edge, and can also be used as a stand-alone JavaScript engine. A remote memory corruption...

7.6CVSS7.6AI score0.65312EPSS
SaveExploits4References1
CNVD
CNVD
•added 2017/12/13 12:00 a.m.•8 views

Microsoft Windows Edge and Microsoft ChakraCore Remote Code Execution Vulnerability (CNVD-2018-00330)

Microsoft Windows 10 and Windows Server 2016 are both products of the American company Microsoft. The former is a set of operating systems for personal computers, and the latter is a set of server operating systems.Edge is the default browser that comes with one of these systems.ChakraCore is the...

7.6CVSS8.3AI score0.08643EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2017/11/14 12:00 a.m.•1 views

PT-2017-3283

Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description The issue is related to the improper handling of objects in memory by the JavaScript ChakraCore engine and Microsoft Edge browser. This could allow a remote attacker to execute arbitra...

7.6CVSS0.07912EPSS
SaveExploits0References13
Rows per page
Query Builder