Lucene search
K

2814 matches found

Veracode
Veracode
added 2019/06/13 2:30 a.m.20 views

Remote Code Execution (RCE)

ChakraCore is vulnerable to remote code execution RCE. This is due to how the scripting engine handles objects in memory, allowing a remote attacker to execute arbitrary code in the context of the current user...

7.5CVSS7.8AI score0.01456EPSS
Exploits0References3Affected Software2
CNVD
CNVD
added 2019/06/13 12:0 a.m.1 views

Microsoft Edge Chakra Scripting Engine Remote Memory Corruption Vulnerability (CNVD-2019-24841)

Microsoft Edge is Microsoft's new browser, migrating from the EdgeHTML kernel to the Chromium kernel, and will also be coming to Windows 7/8/8.1 and macOS platforms. The Microsoft Edge Chakra Scripting Engine Remote Memory Corruption vulnerability can be exploited by an attacker to execute...

7.6CVSS7.2AI score0.13818EPSS
Exploits0References1
CNVD
CNVD
added 2019/06/13 12:0 a.m.1 views

Microsoft Internet Explorer Scripting Engine Remote Memory Corruption Vulnerability (CNVD-2019-24756)

Internet Explorer, is a web browser from Microsoft. Formerly known as Microsoft Internet Explorer and Windows Internet Explorer abbreviated as IE. A remote memory corruption vulnerability exists in Microsoft Internet Explorer Scripting Engine, which can be exploited by an attacker to execute...

7.6CVSS7.4AI score0.04071EPSS
Exploits0References1
CNVD
CNVD
added 2019/06/13 12:0 a.m.0 views

Microsoft Internet Explorer Scripting Engine Remote Memory Corruption Vulnerability (CNVD-2019-24757)

Internet Explorer, is a web browser from Microsoft. Formerly known as Microsoft Internet Explorer and Windows Internet Explorer, or IE for short. A remote memory corruption vulnerability exists in Microsoft Internet Explorer Scripting Engine, which can be exploited by an attacker to execute...

7.6CVSS7.4AI score0.04071EPSS
Exploits0References1
CNVD
CNVD
added 2019/06/13 12:0 a.m.2 views

Microsoft Internet Explorer Scripting Engine Remote Memory Corruption Vulnerability

Internet Explorer, is a web browser from Microsoft. Formerly known as Microsoft Internet Explorer and Windows Internet Explorer, or IE for short. A remote memory corruption vulnerability exists in Microsoft Internet Explorer Scripting Engine, which can be exploited by an attacker to execute...

7.6CVSS7.4AI score0.05665EPSS
Exploits0References1
NVD
NVD
added 2019/06/12 2:29 p.m.14 views

CVE-2019-1052

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge HTML-based. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who...

7.6CVSS7.5AI score0.01456EPSS
Exploits0References2
OSV
OSV
added 2019/06/12 2:29 p.m.1 views

CVE-2019-1055

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploit...

7.5CVSS7.8AI score0.04071EPSS
Exploits0References2
NVD
NVD
added 2019/06/12 2:29 p.m.16 views

CVE-2019-1080

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploit...

7.6CVSS7.6AI score0.04071EPSS
Exploits0References2
OSV
OSV
added 2019/06/12 2:29 p.m.1 views

CVE-2019-1080

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploit...

7.5CVSS6.5AI score0.04071EPSS
Exploits0References2
OSV
OSV
added 2019/06/12 2:29 p.m.18 views

CVE-2019-1052

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge HTML-based. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who...

4.2CVSS6.8AI score0.01456EPSS
Exploits0References2
NVD
NVD
added 2019/06/12 2:29 p.m.15 views

CVE-2019-1051

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge HTML-based. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who...

7.6CVSS7.5AI score0.13818EPSS
Exploits0References2
OSV
OSV
added 2019/06/12 2:29 p.m.14 views

CVE-2019-1023

An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory in Microsoft Edge. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. In a web-based attack scenario, an...

6.5CVSS6.8AI score0.12446EPSS
Exploits0References2
OSV
OSV
added 2019/06/12 2:29 p.m.19 views

CVE-2019-1024

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge HTML-based. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who...

4.2CVSS6.8AI score0.01456EPSS
Exploits0References2
NVD
NVD
added 2019/06/12 2:29 p.m.14 views

CVE-2019-1023

An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory in Microsoft Edge. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. In a web-based attack scenario, an...

6.5CVSS6AI score0.12446EPSS
Exploits0References2
NVD
NVD
added 2019/06/12 2:29 p.m.19 views

CVE-2019-1024

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge HTML-based. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who...

7.6CVSS7.5AI score0.01456EPSS
Exploits0References2
NVD
NVD
added 2019/06/12 2:29 p.m.15 views

CVE-2019-1002

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge HTML-based. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who...

7.6CVSS7.5AI score0.01194EPSS
Exploits0References2
NVD
NVD
added 2019/06/12 2:29 p.m.18 views

CVE-2019-0989

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge HTML-based. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who...

7.6CVSS7.5AI score0.01456EPSS
Exploits0References2
NVD
NVD
added 2019/06/12 2:29 p.m.14 views

CVE-2019-0993

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge HTML-based. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who...

7.6CVSS7.5AI score0.01456EPSS
Exploits0References2
OSV
OSV
added 2019/06/12 2:29 p.m.0 views

CVE-2019-0988

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploit...

7.5CVSS7.8AI score0.05665EPSS
Exploits0References3
NVD
NVD
added 2019/06/12 2:29 p.m.15 views

CVE-2019-1005

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploit...

7.6CVSS7.6AI score0.04071EPSS
Exploits0References2
Rows per page
Query Builder