Lucene search
K

2814 matches found

Github Security Blog
Github Security Blog
added 2022/05/13 1:18 a.m.22 views

ChakraCore RCE Vulnerability

Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0834,...

7.6CVSS7.2AI score0.284EPSS
Exploits14References6Affected Software1
OSV
OSV
added 2022/05/13 1:18 a.m.25 views

GHSA-9PVJ-PGG9-PVQQ ChakraCore RCE Vulnerability

Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0834,...

7.5CVSS6.8AI score0.29342EPSS
Exploits15References5
OSV
OSV
added 2022/05/13 1:18 a.m.24 views

GHSA-V3XP-3WPQ-RVHP ChakraCore RCE Vulnerability

Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0834,...

7.5CVSS6.8AI score0.79299EPSS
Exploits15References7
OSV
OSV
added 2022/05/13 1:18 a.m.19 views

GHSA-M8X8-5CH7-C5W9 ChakraCore RCE Vulnerability

Microsoft Edge and ChakraCore in Microsoft Windows 10 1703 and 1709 allows remote code execution, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0834, CVE-2018-0835, CVE-2018-0837, CVE-2018-083...

7.5CVSS6.8AI score0.284EPSS
Exploits14References6
OSV
OSV
added 2022/05/13 1:18 a.m.25 views

GHSA-3CWF-PWCG-57XR ChakraCore RCE Vulnerability

Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0834,...

7.5CVSS6.8AI score0.79299EPSS
Exploits15References7
Github Security Blog
Github Security Blog
added 2022/05/13 1:18 a.m.21 views

ChakraCore RCE Vulnerability

Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0834,...

7.6CVSS7.2AI score0.79299EPSS
Exploits15References7Affected Software1
CISA KEV Catalog
CISA KEV Catalog
added 2022/03/25 12:0 a.m.21 views

Microsoft Scripting Engine Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer...

7.6CVSS2.7AI score0.8249EPSS
In wildExploits8
CISA KEV Catalog
CISA KEV Catalog
added 2022/03/03 12:0 a.m.17 views

ChakraCore Scripting Engine Type Confusion Vulnerability

The ChakraCore scripting engine contains a type confusion vulnerability which can allow for remote code execution...

7.6CVSS2.8AI score0.8937EPSS
In wildExploits7
CISA KEV Catalog
CISA KEV Catalog
added 2022/02/15 12:0 a.m.18 views

Microsoft Internet Explorer Type Confusion Vulnerability

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer...

7.6CVSS2.1AI score0.91479EPSS
In wildExploits6
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.13 views

Mageia: Security Advisory (MGASA-2018-0325)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS8.7AI score0.00425EPSS
Exploits0References5
CNVD
CNVD
added 2021/11/12 12:0 a.m.35 views

Microsoft Chakra Scripting Engine Memory Corruption Vulnerability

Microsoft Windows Scripting is a scripting language for the Windows operating system from Microsoft Corporation USA.A memory corruption vulnerability exists in the Microsoft Chakra Scripting Engine, which can be exploited by attackers to execute code on the target host...

7.5CVSS4.2AI score0.02954EPSS
Exploits0References1
Qualys Blog
Qualys Blog
added 2021/11/11 1:7 a.m.200 views

Microsoft & Adobe Patch Tuesday (November 2021) – Microsoft 55 Vulnerabilities with 6 Critical, 6 Zero-Days. Adobe 4 Vulnerabilities

Microsoft Patch Tuesday – November 2021 Microsoft patched 55 vulnerabilities in their November 2021 Patch Tuesday release, of which six are rated as critical severity and six were previously reported as zero-days. Critical Microsoft Vulnerabilities Patched CVE-2021-42298 - Microsoft Defender Remo...

9.3CVSS9.6AI score0.93618EPSS
Exploits11
NVD
NVD
added 2021/11/10 1:19 a.m.18 views

CVE-2021-42279

Chakra Scripting Engine Memory Corruption Vulnerability...

7.5CVSS0.02954EPSS
Exploits0References1
OSV
OSV
added 2021/11/10 1:19 a.m.0 views

CVE-2021-42279

Chakra Scripting Engine Memory Corruption Vulnerability...

4.2CVSS7.3AI score0.02954EPSS
Exploits0References1
Prion
Prion
added 2021/11/10 1:19 a.m.27 views

Memory corruption

Chakra Scripting Engine Memory Corruption Vulnerability...

5.1CVSS7.4AI score0.02954EPSS
Exploits0References1Affected Software2
CVE
CVE
added 2021/11/10 12:47 a.m.148 views

CVE-2021-42279

CVE-2021-42279 concerns a memory corruption vulnerability in the Chakra Scripting Engine / ChakraCore. Connected sources indicate an out-of-bounds write as the root cause, enabling memory corruption with a network-accessible context and high impact characteristics (I/H, A/H) per CVSS details, tho...

7.5CVSS6.2AI score0.02954EPSS
Exploits0References1Affected Software5
Microsoft CVE
Microsoft CVE
added 2021/11/09 8:0 a.m.36 views

Chakra Scripting Engine Memory Corruption Vulnerability

...

7.5CVSS7.7AI score0.02954EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2021/11/09 12:0 a.m.1 views

PT-2021-4876 · Microsoft · Chakracore +2

Name of the Vulnerable Software and Affected Versions: Chakra Scripting Engine versions affected versions not specified ChakraCore versions affected versions not specified Description: The issue is related to a memory corruption vulnerability in the Chakra Scripting Engine, caused by an...

7.5CVSS5.9AI score0.02954EPSS
Exploits0References11
Kaspersky
Kaspersky
added 2021/11/09 12:0 a.m.72 views

KLA12345 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to gain privileges, obtain sensitive information, execute arbitrary code, bypass security restrictions, cause denial of service. Below is a complete list of vulnerabilities: 1. An elevation...

9CVSS9.7AI score0.94066EPSS
Exploits10References50
CNNVD
CNNVD
added 2021/11/09 12:0 a.m.2 views

Microsoft Windows Scripting 缓冲区错误漏洞

Microsoft Windows Scripting is a scripting language for the Windows operating system from Microsoft Corporation USA.A memory corruption vulnerability exists in the Microsoft Chakra Scripting Engine, which can be exploited by attackers to execute code on the target host...

7.5CVSS6AI score0.02954EPSS
Exploits0References4
Rows per page
Query Builder