Lucene search
+L

2824 matches found

Github Security Blog
Github Security Blog
added 2022/05/13 1:48 a.m.29 views

ChakraCore RCE Vulnerability

Microsoft ChakraCore allows an attacker to bypass Control Flow Guard CFG in conjunction with another vulnerability to run arbitrary code on a target system, due to how the Chakra scripting engine handles accessing memory, aka "Scripting Engine Security Feature Bypass"...

8.5CVSS6.9AI score0.03686EPSS
SaveExploits0References6Affected Software1
OSV
OSV
added 2022/05/13 1:42 a.m.52 views

GHSA-C79V-2RJQ-965M ChakraCore vulnerable to privilege escalation

ChakraCore allows an attacker to gain the same user rights as the current user, due to the way that the ChakraCore scripting engine handles objects in memory. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take...

9.8CVSS9.4AI score0.09513EPSS
SaveExploits0References8
Github Security Blog
Github Security Blog
added 2022/05/13 1:42 a.m.26 views

ChakraCore vulnerable to privilege escalation

ChakraCore allows an attacker to gain the same user rights as the current user, due to the way that the ChakraCore scripting engine handles objects in memory. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take...

10CVSS8.6AI score0.09513EPSS
SaveExploits0References8Affected Software1
OSV
OSV
added 2022/05/13 1:21 a.m.18 views

GHSA-6C6R-39CV-X5FQ Chakra JIT server Privilege Escalation

A vulnerability exists in Microsoft Chakra JIT server, aka 'Scripting Engine Elevation of Privileges Vulnerability'...

8.1CVSS8.6AI score0.04362EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
added 2022/05/13 1:21 a.m.22 views

Chakra JIT server Privilege Escalation

A vulnerability exists in Microsoft Chakra JIT server, aka 'Scripting Engine Elevation of Privileges Vulnerability'...

8.1CVSS6.8AI score0.04362EPSS
SaveExploits0References6Affected Software1
OSV
OSV
added 2022/05/13 1:21 a.m.33 views

GHSA-WWFW-M54G-GV72 ChakraCore information disclosure vulnerability

An information disclosure vulnerability exists when Chakra improperly discloses the contents of its memory, which could provide an attacker with information to further compromise the user's computer or data.To exploit the vulnerability, an attacker must know the memory address of where the object...

4.3CVSS4.8AI score0.05432EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
added 2022/05/13 1:21 a.m.40 views

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2019-0539, CVE-2019-0567...

7.6CVSS7AI score0.69455EPSS
SaveExploits4References6Affected Software1
OSV
OSV
added 2022/05/13 1:21 a.m.29 views

GHSA-2M5H-6G38-JJF2 ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2019-0539, CVE-2019-0567...

7.5CVSS7.5AI score0.69455EPSS
SaveExploits4References6
OSV
OSV
added 2022/05/13 1:21 a.m.28 views

GHSA-2XRC-27MC-638Q ChakraCore Remote code execution Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8583, CVE-2018-8617,...

7.5CVSS7.5AI score0.12965EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
added 2022/05/13 1:21 a.m.34 views

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8583, CVE-2018-8618,...

7.6CVSS7AI score0.62483EPSS
SaveExploits4References7Affected Software1
OSV
OSV
added 2022/05/13 1:20 a.m.16 views

GHSA-FW42-4MQ4-4QPQ ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore...

9.8CVSS9.4AI score0.1847EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
added 2022/05/13 1:20 a.m.27 views

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore...

10CVSS7.5AI score0.1847EPSS
SaveExploits0References6Affected Software1
Github Security Blog
Github Security Blog
added 2022/05/13 1:20 a.m.29 views

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8354, CVE-2018-8391, CVE-2018-8457,...

7.6CVSS7.3AI score0.14558EPSS
SaveExploits0References7Affected Software1
OSV
OSV
added 2022/05/13 1:20 a.m.30 views

GHSA-6XMV-MX7Q-789R ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8354, CVE-2018-8391, CVE-2018-8457,...

7.5CVSS6.6AI score0.14558EPSS
SaveExploits0References7
OSV
OSV
added 2022/05/13 1:20 a.m.28 views

GHSA-GGVV-6V25-R49R ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore. This CVE ID is unique from CVE-2018-8266, CVE-2018-8380, CVE-2018-8381...

7.5CVSS6.5AI score0.6211EPSS
SaveExploits3References7
Github Security Blog
Github Security Blog
added 2022/05/13 1:20 a.m.40 views

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripting Engine Memory Corruption Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10. This CVE ID is unique from...

7.6CVSS7.4AI score0.14443EPSS
SaveExploits0References5Affected Software1
Github Security Blog
Github Security Blog
added 2022/05/13 1:20 a.m.32 views

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore. This CVE ID is unique from CVE-2018-8353, CVE-2018-8355, CVE-2018-8371, CVE-2018-8372,...

7.6CVSS7.4AI score0.14512EPSS
SaveExploits0References7Affected Software1
OSV
OSV
added 2022/05/13 1:20 a.m.39 views

GHSA-H8JQ-5737-HPCF ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge. This CVE ID is unique from CVE-2018-8353,...

7.5CVSS6.9AI score0.68242EPSS
SaveExploits4References8
OSV
OSV
added 2022/05/13 1:20 a.m.23 views

GHSA-6G23-FWW6-RFRJ ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8391, CVE-2018-8456, CVE-2018-8457,...

7.5CVSS6.6AI score0.14558EPSS
SaveExploits0References7
OSV
OSV
added 2022/05/13 1:20 a.m.28 views

GHSA-GXXX-J8M7-HH7M ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8280, CVE-2018-8286,...

7.5CVSS7.5AI score0.19229EPSS
SaveExploits0References7
Rows per page
Query Builder