Microsoft Chakra Array Iterator Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Chakra. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

Chakra Scripting Engine Memory Corruption Vulnerability

...

Chakra Scripting Engine Memory Corruption Vulnerability

...

PT-2020-4693 · Microsoft · Chakra Scripting Engine +1

Name of the Vulnerable Software and Affected Versions: Chakra Scripting Engine affected versions not specified Description: The issue is caused by a buffer overflow in memory, allowing a remote attacker to disclose protected information. It affects the Chakra scripting engine, potentially enablin...

PT-2020-4692 · Microsoft · Chakra Scripting Engine +1

Name of the Vulnerable Software and Affected Versions: Chakra Scripting Engine affected versions not specified Description: The issue is related to a memory corruption vulnerability in the Chakra scripting engine, which can be caused by a buffer overflow. This can allow a remote attacker to...

chakra-san.nl Cross Site Scripting vulnerability OBB-1489731

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

chakra-san.nl Cross Site Scripting vulnerability OBB-1478775

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

chakra-san.nl Cross Site Scripting vulnerability OBB-1456836

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser allows a hacker to execute arbitrary code.

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser is related to the writing of data beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...

Microsoft Chakra Inline Cache Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Chakra. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the implementatio...

Memory Corruption Vulnerability in ChakraCore

ChakraCore is the core part of an open source ChakraJavaScript scripting engine used in the Edge browser or as a separate JavaScript engine . A memory corruption vulnerability exists in ChakraCore, which can be exploited by attackers to cause a denial of service...

The vulnerability of the Chakra browser script mechanism in Microsoft Edge allows a hacker to execute arbitrary code.

The vulnerability of the Chakra scenario mechanism in Microsoft Edge browsers relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Microsoft Chakra Intl Object Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Chakra. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of t...

CVE-2020-1037

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge HTML-based, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'...

CVE-2020-1037

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge HTML-based. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who...

Remote code execution

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge HTML-based, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'...

CVE-2020-1037

CVE-2020-1037 is a ChakraCore/Edge remote code execution vulnerability. The Chakra scripting engine mishandles in-memory objects, enabling an attacker to execute arbitrary code in the context of the user. Public sources (GHSA-8XV4-C7RQ-J577, NVD entry) describe it as a ChakraCore/Edge RCE without...

CVE-2020-1037 Chakra Scripting Engine Memory Corruption Vulnerability

...

Microsoft Edge and ChakraCore Remote Code Execution Vulnerability (CNVD-2020-61596)

Microsoft ChakraCore and Microsoft Edge are both products of Microsoft Corporation.ChakraCore is the core of an open-source Chakra JavaScript scripting engine used in the Edge browser, and is also available as a standalone JavaScript engine. Microsoft Edge is a web browser that comes with Windows...

Microsoft ChakraCore and Edge Remote Code Execution Vulnerability (CNVD-2020-72698)

Microsoft ChakraCore and Microsoft Edge are both products of Microsoft Corporation.ChakraCore is the core of an open-source Chakra JavaScript scripting engine used in the Edge browser, and is also available as a standalone JavaScript engine. Microsoft Edge is a web browser that comes with Windows...