Lucene search
+L

57 matches found

CNVD
CNVD
•added 2017/08/11 12:00 a.m.•15 views

Microsoft Chakra JavaScript Engine Remote Code Execution Vulnerability

Microsoft Chakra JavaScript engine is a component of the JavaScript engine used in Internet Explorer and Edge Web browsers by Microsoft. A remote code execution vulnerability exists in the Microsoft Chakra JavaScript engine. A remote attacker could exploit this vulnerability to execute arbitrary...

10CVSS9.4AI score0.20066EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2017/08/08 12:00 a.m.•77 views

Microsoft Chakra eval Integer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Chakra. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

7.6CVSS8AI score0.71609EPSS
SaveExploits3References1
Zero Day Initiative
Zero Day Initiative
•added 2017/07/11 12:00 a.m.•45 views

Microsoft Chakra Array JIT Optimization Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling o...

7.6CVSS7.8AI score0.66911EPSS
SaveExploits6References1
Zero Day Initiative
Zero Day Initiative
•added 2017/07/10 12:00 a.m.•70 views

(Pwn2Own) Microsoft Chakra ArrayBuffer Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Chakra. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

7.6CVSS2.4AI score0.31582EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
•added 2017/06/15 12:00 a.m.•19 views

The vulnerability of Microsoft Chakra’s kernel in the Microsoft Edge browser allows a hacker to execute arbitrary code.

The vulnerability in the Microsoft Chakra kernel of the Microsoft Edge browser arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code when accessing objects in memory...

7.5CVSS8.4AI score0.13382EPSS
SaveExploits0References2
CNVD
CNVD
•added 2017/05/19 12:00 a.m.•20 views

Microsoft Chakra Remote Code Execution Vulnerability

Microsoft Chakra is a JavaScript engine component used by Microsoft's Edge web browser.Chakra Core is an open source version of Chakra. A remote code execution vulnerability exists in Microsoft Chakra Core. A remote attacker could exploit this vulnerability to cause memory corruption...

9.8CVSS7.8AI score0.13382EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2017/05/15 5:00 p.m.•45 views

CVE-2017-0223

A remote code execution vulnerability exists in Microsoft Chakra Core in the way JavaScript engines render when handling objects in memory. aka "Scripting Engine Memory Corruption Vulnerability". This vulnerability is unique from CVE-2017-0252...

9.6AI score0.14682EPSS
SaveExploits0References2
CVE
CVE
•added 2017/05/15 5:00 p.m.•119 views

CVE-2017-0223

CVE-2017-0223 refers to a ChakraCore remote code execution vulnerability in Microsoft’s Chakra Core rendering engine used by Edge. The root cause is memory corruption in the engine when handling in-memory objects, enabling remote code execution via crafted content. Connected advisories (GHSA and ...

9.8CVSS9.4AI score0.14682EPSS
SaveExploits0References2Affected Software1
Mend
Mend
•added 2017/05/15 5:00 p.m.•3 views

CVE-2017-0252

A remote code execution vulnerability exists in Microsoft Chakra Core in the way JavaScript engines render when handling objects in memory. aka "Scripting Engine Memory Corruption Vulnerability". This vulnerability is unique from CVE-2017-0223...

9.8CVSS0.13382EPSS
SaveExploits0References4
Mend
Mend
•added 2017/05/15 5:00 p.m.•2 views

CVE-2017-0223

A remote code execution vulnerability exists in Microsoft Chakra Core in the way JavaScript engines render when handling objects in memory. aka "Scripting Engine Memory Corruption Vulnerability". This vulnerability is unique from CVE-2017-0252...

9.8CVSS0.14682EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2017/05/15 12:00 a.m.•2 views

PT-2017-2179

Name of the Vulnerable Software and Affected Versions Microsoft Chakra Core affected versions not specified Microsoft Edge affected versions not specified Description A remote code execution issue exists in the way JavaScript engines handle objects in memory, potentially allowing a remote attacke...

9.8CVSS0.13382EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/05/15 12:00 a.m.•6 views

CVE-2017-0252: Improper Restriction of Operations within the Bounds of a Memory Buffer

A remote code execution vulnerability exists in Microsoft Chakra Core in the way JavaScript engines render when handling objects in memory. aka "Scripting Engine Memory Corruption Vulnerability". This vulnerability is unique from CVE-2017-0223...

9.8CVSS8.6AI score0.13382EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2017/05/15 12:00 a.m.•1 views

PT-2017-2180

Name of the Vulnerable Software and Affected Versions Microsoft Chakra Core affected versions not specified Microsoft Edge affected versions not specified Description A remote code execution issue exists due to the way JavaScript engines handle objects in memory, potentially allowing a remote...

9.8CVSS0.14682EPSS
SaveExploits0References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/05/15 12:00 a.m.•5 views

CVE-2017-0223: Improper Restriction of Operations within the Bounds of a Memory Buffer

A remote code execution vulnerability exists in Microsoft Chakra Core in the way JavaScript engines render when handling objects in memory. aka "Scripting Engine Memory Corruption Vulnerability". This vulnerability is unique from CVE-2017-0252...

9.8CVSS8.6AI score0.14682EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
•added 2017/05/10 12:00 a.m.•82 views

(Pwn2Own) Microsoft Chakra Array Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Chakra. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

7.6CVSS2.3AI score0.16992EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2016/07/12 12:00 a.m.•51 views

Microsoft Chakra ArrayBuffer.transfer Uninitialized Buffer Information Leak Vulnerability

This vulnerability allows remote attackers to leak sensitive information on vulnerable installations of Microsoft Chakra. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handlin...

6.5CVSS1.2AI score0.20869EPSS
SaveExploits0References1
CNVD
CNVD
•added 2016/05/11 12:00 a.m.•33 views

Microsoft Chakra JavaScript Scripting Engine Memory Corruption Vulnerability (CNVD-2016-03020)

Microsoft Edge is a web browser developed by Microsoft and is the default browser that comes with the Windows 10 operating system.Chakra JScript engine is a JavaScript engine component used by IE and Edge web browser. A memory corruption vulnerability exists in the way the Microsoft Chakra...

7.6CVSS7.2AI score0.28261EPSS
SaveExploits0References1
Rows per page
Query Builder