Lucene search
K

2814 matches found

Github Security Blog
Github Security Blog
added 2021/07/28 6:57 p.m.59 views

Out-of-bounds write in ChakraCore

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0768, CVE-2020-0823, CVE-2020-0825, CVE-2020-0826, CVE-2020-0827,...

7.6CVSS2.5AI score0.08249EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2021/07/28 6:57 p.m.22 views

GHSA-86GW-G9JV-8VFG Out-of-bounds write in ChakraCore

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0768, CVE-2020-0823, CVE-2020-0825, CVE-2020-0826, CVE-2020-0827,...

7.5CVSS7.9AI score0.03253EPSS
Exploits0References2
Github Security Blog
Github Security Blog
added 2021/07/28 6:57 p.m.69 views

Out-of-bounds write in ChakraCore

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0768, CVE-2020-0823, CVE-2020-0825, CVE-2020-0826, CVE-2020-0827, CVE-2020-0828...

7.6CVSS5.2AI score0.08249EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2021/07/28 6:57 p.m.20 views

GHSA-2QGV-2CV4-G4CG Out-of-bounds write in ChakraCore

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0768, CVE-2020-0823, CVE-2020-0825, CVE-2020-0826, CVE-2020-0827,...

7.5CVSS7.9AI score0.03253EPSS
Exploits0References2
Github Security Blog
Github Security Blog
added 2021/07/28 6:57 p.m.58 views

Out-of-bounds write in ChakraCore

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0768, CVE-2020-0823, CVE-2020-0825, CVE-2020-0826, CVE-2020-0827, CVE-2020-0828,...

7.6CVSS2.8AI score0.08249EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2021/07/28 6:57 p.m.25 views

GHSA-WVHV-RR3V-VHPJ Out-of-bounds write in ChakraCore

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0768, CVE-2020-0825, CVE-2020-0826, CVE-2020-0827, CVE-2020-0828, CVE-2020-0829,...

7.5CVSS7.9AI score0.03843EPSS
Exploits0References2
OSV
OSV
added 2021/07/28 6:57 p.m.34 views

GHSA-J89M-GCJF-6GHP Out-of-bounds write in ChakraCore

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0768, CVE-2020-0823, CVE-2020-0826, CVE-2020-0827, CVE-2020-0828, CVE-2020-0829,...

7.5CVSS7.9AI score0.28794EPSS
Exploits0References2
OSV
OSV
added 2021/07/16 9:15 p.m.0 views

CVE-2021-34448

Scripting Engine Memory Corruption Vulnerability...

6.8CVSS7.2AI score0.02032EPSS
Exploits0References2
NVD
NVD
added 2021/07/16 9:15 p.m.16 views

CVE-2021-34448

Scripting Engine Memory Corruption Vulnerability...

9.3CVSS0.02032EPSS
Exploits0References2
Prion
Prion
added 2021/07/16 9:15 p.m.16 views

Memory corruption

Scripting Engine Memory Corruption Vulnerability...

9.3CVSS8.3AI score0.02032EPSS
Exploits0References1Affected Software4
Vulnrichment
Vulnrichment
added 2021/07/16 8:19 p.m.9 views

CVE-2021-34448 Scripting Engine Memory Corruption Vulnerability

...

6.8CVSS6.8AI score0.02032EPSS
Exploits0References1
Cvelist
Cvelist
added 2021/07/16 8:19 p.m.22 views

CVE-2021-34448 Scripting Engine Memory Corruption Vulnerability

...

6.8CVSS7.7AI score0.02032EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2021/07/16 12:0 a.m.116 views

CVE-2021-34448

Scripting Engine Memory Corruption Vulnerability Recent assessments: gwillcox-r7 at July 14, 2021 5:02pm UTC reported: Looking at Microsoft’s advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-34448 shows very little information other than that this is a scripting engine...

9.3CVSS7.6AI score0.27583EPSS
In wildExploits2References2
Information Security Automation
Information Security Automation
added 2021/07/14 9:0 p.m.209 views

Vulristics Microsoft Patch Tuesday July 2021: Zero-days EoP in Kernel and RCE in Scripting Engine, RCEs in Kernel, DNS Server, Exchange and Hyper-V

Hello everyone! For the past 9 months, Ive been doing Microsoft Patch Tuesday reviews quarterly. Now I think it would be better to review the July Patch Tuesday while the topic is still fresh. And that will save us some time in the next Last Week’s Security news episode. So, July Patch Tuesday, 1...

9.3CVSS0.3AI score0.09864EPSS
Exploits1
ThreatPost
ThreatPost
added 2021/07/13 9:26 p.m.264 views

Microsoft Crushes 116 Bugs, Three Actively Exploited

Three bugs under active exploit were squashed by Microsoft Tuesday, part of its July security roundup of fixes for Windows, Microsoft Office, SharePoint Server and Exchange Server. In all, Microsoft patched 116 bugs. Twelve bugs are rated critical, 103 rated important and one classified as modera...

10CVSS9.2AI score0.9424EPSS
Exploits58References21
Microsoft CVE
Microsoft CVE
added 2021/07/13 7:0 a.m.63 views

Scripting Engine Memory Corruption Vulnerability

...

9.3CVSS9.3AI score0.02032EPSS
Exploits0
CNNVD
CNNVD
added 2021/07/13 12:0 a.m.4 views

Microsoft Scripting Engine 缓冲区错误漏洞

Microsoft Scripting Engine is a tool from Microsoft Corporation USA that provides a scripting engine for JScript and VBScript. A buffer error vulnerability exists in Microsoft Scripting Engine. The following products and versions are affected:Windows 10 Version 1809 for 32-bit Systems,Windows 10...

9.3CVSS8AI score0.02032EPSS
Exploits0References4
VulnCheck KEV
VulnCheck KEV
added 2021/07/13 12:0 a.m.2 views

VulnCheck KEV: CVE-2021-34448

Microsoft Windows Scripting Engine contains an unspecified vulnerability that allows for memory corruption...

9.3CVSS7.1AI score0.02032EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2021/07/13 12:0 a.m.89 views

Security Updates for Internet Explorer (July 2021)

The Internet Explorer installation on the remote host is missing a security update. It is, therefore, affected by the following vulnerabilities: - A security bypass vulnerability exists in the HTML platforms component. An unauthenticated, remote attacker can exploit this to bypass security in ord...

9.3CVSS8.7AI score0.07897EPSS
Exploits0References9
Positive Technologies
Positive Technologies
added 2021/07/13 12:0 a.m.2 views

PT-2021-4671 · Microsoft · Windows Scripting Engine +2

Name of the Vulnerable Software and Affected Versions: Microsoft Windows Scripting Engine affected versions not specified Description: The issue is related to a memory corruption vulnerability in the Scripting Engine, which can be exploited by an attacker to execute arbitrary code or cause a deni...

9.3CVSS9.1AI score0.02032EPSS
Exploits0References16
Rows per page
Query Builder