The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser allows a hacker to execute arbitrary code in the context of the current user.

The vulnerability of the ChakraCore JavaScript script handler in the Microsoft Edge browser is caused by an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, through a...

CVE-2019-7846

Adobe Campaign Classic version 18.10.5-8984 and earlier versions have an Improper error handling vulnerability. Successful exploitation could lead to Information Disclosure in the context of the current user...

CVE-2019-7953

Adobe Experience Manager version 6.4 and ealier have a Cross-Site Request Forgery vulnerability. Successful exploitation could lead to Sensitive Information disclosure in the context of the current user...

CVE-2019-7843

Adobe Campaign Classic version 18.10.5-8984 and earlier versions have an Insufficient input validation vulnerability. Successful exploitation could lead to Information Disclosure in the context of the current user...

CVE-2019-7847

Adobe Campaign Classic version 18.10.5-8984 and earlier versions have an Improper Restriction of XML External Entity Reference 'XXE' vulnerability. Successful exploitation could lead to Arbitrary read access to the file system in the context of the current user...

CVE-2019-7941

Adobe Campaign Classic version 18.10.5-8984 and earlier versions have an Information Exposure Through an Error Message vulnerability. Successful exploitation could lead to Information Disclosure in the context of the current user...

CVE-2019-7954

Adobe Experience Manager version 6.4 and ealier have a Stored Cross-site Scripting vulnerability. Successful exploitation could lead to Sensitive Information disclosure in the context of the current user...

CVE-2019-7953

Adobe Experience Manager version 6.4 and ealier have a Cross-Site Request Forgery vulnerability. Successful exploitation could lead to Sensitive Information disclosure in the context of the current user...

Information disclosure

Adobe Campaign Classic version 18.10.5-8984 and earlier versions have an Information Exposure Through an Error Message vulnerability. Successful exploitation could lead to Information Disclosure in the context of the current user...

Input validation

Adobe Campaign Classic version 18.10.5-8984 and earlier versions have an Improper error handling vulnerability. Successful exploitation could lead to Information Disclosure in the context of the current user...

CVE-2019-7956

Adobe Dreamweaver direct download installer versions 19.0 and below, 18.0 and below have an Insecure Library Loading DLL hijacking vulnerability. Successful exploitation could lead to Privilege Escalation in the context of the current user...

CVE-2019-7846

Adobe Campaign Classic version 18.10.5-8984 and earlier versions have an Improper error handling vulnerability. Successful exploitation could lead to Information Disclosure in the context of the current user...

Microsoft Edge Chakra Scripting Engine Memory Corruption Vulnerability (CNVD-2019-27086)

Edge is Microsoft's browser for Windows 10, characterized by fast and secure.ChakraCore is a Microsoft open source, efficient JS scripting engine for Windows IE/Edge kernel. A memory corruption vulnerability exists in Microsoft Edge. The vulnerability stems from a problem with the way the Chakra...

Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability (CNVD-2019-39014)

Internet Explorer is a web browser from Microsoft. Formerly known as Microsoft Internet Explorer prior to version 6 and Windows Internet Explorer versions 7, 8, 9, 10, 11, or IE for short. A memory corruption vulnerability exists in the Microsoft Internet Explorer scripting engine. The...

Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability (CNVD-2019-39015)

Internet Explorer is a web browser from Microsoft. Formerly known as Microsoft Internet Explorer prior to version 6 and Windows Internet Explorer versions 7, 8, 9, 10, 11, or IE for short. A memory corruption vulnerability exists in the Microsoft Internet Explorer scripting engine. The...

Microsoft Edge Chakra Scripting Engine Memory Corruption Vulnerability (CNVD-2019-27084)

Edge is Microsoft's browser for Windows 10, characterized by fast and secure.ChakraCore is a Microsoft open source, efficient JS scripting engine for Windows IE/Edge kernel. A memory corruption vulnerability exists in Microsoft Edge. The vulnerability stems from a problem with the way the Chakra...

Microsoft Edge Chakra Scripting Engine Memory Corruption Vulnerability (CNVD-2019-27085)

Edge is Microsoft's browser for Windows 10, characterized by fast and secure.ChakraCore is a Microsoft open source, efficient JS scripting engine for Windows IE/Edge kernel. A memory corruption vulnerability exists in Microsoft Edge. The vulnerability stems from a problem with the way the Chakra...

Microsoft Edge Chakra Scripting Engine Memory Corruption Vulnerability (CNVD-2019-27087)

Edge is Microsoft's browser for Windows 10, characterized by fast and secure.ChakraCore is a Microsoft open source, efficient JS scripting engine for Windows IE/Edge kernel. A memory corruption vulnerability exists in Microsoft Edge. The vulnerability stems from a problem with the way the Chakra...

.NET Framework Remote Code Execution Vulnerability

A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative us...

Remote Code Execution (RCE)

ChakraCore is vulnerable to remote code execution RCE. This is due to how the scripting engine handles objects in memory, allowing a remote attacker to execute arbitrary code in the context of the current user...