ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-0979, CVE-2018-0990,...

GHSA-6V8R-83V3-RMRF ChakraCore RCE Vulnerability

ChakraCore and Microsoft Windows 10 1709 allow remote code execution, due to how the Chakra scripting engine handles objects in memory, aka "Chakra Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0872, CVE-2018-0873, CVE-2018-0874, CVE-2018-0930,...

Microsoft Edge Memory Corruption Vulnerability

The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute remote code or cause a denial of service memory corruption via a crafted web site...

Microsoft Edge Memory Corruption Vulnerability

The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute remote code or cause a denial of service memory corruption via a crafted web site...

CVE-2020-23315

There is an ASSERTION pFuncBody-GetYieldRegister == oldYieldRegister failed in Js::DebugContext::RundownSourcesAndReparse in ChakraCore version 1.12.0.0-beta...

securitylab

This repository is an offensive tool for a CodeQL query library. It contains various CodeQL queries for detecting vulnerabilities in C++ code, specifically targeting the ChakraCore and Chromium projects. The queries are designed to identify potential security issues, such as bad overflow checks,...

The vulnerability of the Chakra scenario mechanism in Windows operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of the Chakra scenario mechanism in Windows operating systems is related to the execution of write operations beyond buffer boundaries into memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Microsoft Chakra Scripting Engine Memory Corruption Vulnerability

Microsoft Windows Scripting is a scripting language for the Windows operating system from Microsoft Corporation USA.A memory corruption vulnerability exists in the Microsoft Chakra Scripting Engine, which can be exploited by attackers to execute code on the target host...

Microsoft & Adobe Patch Tuesday (November 2021) – Microsoft 55 Vulnerabilities with 6 Critical, 6 Zero-Days. Adobe 4 Vulnerabilities

Microsoft Patch Tuesday – November 2021 Microsoft patched 55 vulnerabilities in their November 2021 Patch Tuesday release, of which six are rated as critical severity and six were previously reported as zero-days. Critical Microsoft Vulnerabilities Patched CVE-2021-42298 - Microsoft Defender Remo...

CVE-2021-42279

Chakra Scripting Engine Memory Corruption Vulnerability...

CVE-2021-42279

Chakra Scripting Engine Memory Corruption Vulnerability...

Memory corruption

Chakra Scripting Engine Memory Corruption Vulnerability...

CVE-2021-42279

Chakra Scripting Engine Memory Corruption Vulnerability...

CVE-2021-42279 Chakra Scripting Engine Memory Corruption Vulnerability

...

CVE-2021-42279

CVE-2021-42279 concerns a memory corruption vulnerability in the Chakra Scripting Engine / ChakraCore. Connected sources indicate an out-of-bounds write as the root cause, enabling memory corruption with a network-accessible context and high impact characteristics (I/H, A/H) per CVSS details, tho...

PT-2021-4876 · Microsoft · Chakracore +2

Name of the Vulnerable Software and Affected Versions: Chakra Scripting Engine versions affected versions not specified ChakraCore versions affected versions not specified Description: The issue is related to a memory corruption vulnerability in the Chakra Scripting Engine, caused by an...

Microsoft Windows Scripting 缓冲区错误漏洞

Microsoft Windows Scripting is a scripting language for the Windows operating system from Microsoft Corporation USA.A memory corruption vulnerability exists in the Microsoft Chakra Scripting Engine, which can be exploited by attackers to execute code on the target host...

KLA12349 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to spoof user interface, execute arbitrary code. Below is a complete list of vulnerabilities: 1. A spoofing vulnerability in Microsoft Edge can be exploited remotely to spoof user interface...

KLA12345 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to gain privileges, obtain sensitive information, execute arbitrary code, bypass security restrictions, cause denial of service. Below is a complete list of vulnerabilities: 1. An elevation...

VulnCheck KEV: CVE-2016-3199

The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-3214...