Lucene search
K

97 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 2:58 a.m.6 views

CVE-2019-0835

An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory, aka 'Microsoft Scripting Engine Information Disclosure Vulnerability'...

6.5CVSS7.7AI score0.25343EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/15 5:14 p.m.18 views

CVE-2025-30397

Access of resource using incompatible type 'type confusion' in Microsoft Scripting Engine allows an unauthorized attacker to execute code over a network...

7.5CVSS7.3AI score0.20737EPSS
Exploits7References3
NVD
NVD
added 2025/05/13 5:16 p.m.44 views

CVE-2025-30397

Access of resource using incompatible type 'type confusion' in Microsoft Scripting Engine allows an unauthorized attacker to execute code over a network...

7.5CVSS0.20737EPSS
Exploits7References4
OSV
OSV
added 2025/05/13 5:16 p.m.2 views

CVE-2025-30397

Access of resource using incompatible type 'type confusion' in Microsoft Scripting Engine allows an unauthorized attacker to execute code over a network...

7.5CVSS5.9AI score0.20737EPSS
Exploits7References4
Microsoft CVE
Microsoft CVE
added 2025/05/13 7:0 a.m.23 views

Scripting Engine Memory Corruption Vulnerability

Access of resource using incompatible type 'type confusion' in Microsoft Scripting Engine allows an unauthorized attacker to execute code over a network...

7.5CVSS6.9AI score0.20737EPSS
Exploits7
CNNVD
CNNVD
added 2025/05/13 12:0 a.m.7 views

Microsoft Scripting Engine 安全漏洞

Microsoft Scripting Engine is a tool from Microsoft USA that provides a scripting engine for JScript and VBScript. A security vulnerability exists in Microsoft Scripting Engine. An attacker exploiting this vulnerability could remotely execute code. The following products and versions are affected...

7.5CVSS8.8AI score0.20737EPSS
Exploits7References2
ATTACKERKB
ATTACKERKB
added 2025/05/13 12:0 a.m.29 views

CVE-2025-30397

Access of resource using incompatible type ‘type confusion’ in Microsoft Scripting Engine allows an unauthorized attacker to execute code over a network. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

7.5CVSS7.1AI score0.20737EPSS
In wildExploits7References2
Positive Technologies
Positive Technologies
added 2025/05/13 12:0 a.m.6 views

PT-2025-21001

Name of the Vulnerable Software and Affected Versions Microsoft Scripting Engine affected versions not specified Description The issue is related to a type confusion vulnerability in the Microsoft Scripting Engine, which allows an unauthorized attacker to execute code over a network. This can be...

7.6CVSS8.5AI score0.20737EPSS
Exploits7References65
CNNVD
CNNVD
added 2024/08/13 12:0 a.m.1 views

Microsoft Scripting Engine 安全漏洞

Microsoft Scripting Engine is a tool from Microsoft USA that provides a scripting engine for JScript and VBScript. A security vulnerability exists in Microsoft Scripting Engine. An attacker has exploited the vulnerability to cause a denial of service on the system. The following products and...

7.5CVSS8.7AI score0.30231EPSS
Exploits0References2
Microsoft KB
Microsoft KB
added 2022/06/14 7:0 a.m.135 views

June 14, 2022—Hotpatch KB5014677 (OS Build 20348.770)

June 14, 2022—Hotpatch KB5014677 OS Build 20348.770 Improvements and fixes This security update includes quality improvements. Key changes include: Addresses an issue in which a principal in a trusted MIT realm fails to obtain a Kerberos service ticket from Active Directory domain controllers DC...

9.3CVSS7.4AI score0.25552EPSS
Exploits0
OSV
OSV
added 2022/05/14 2:3 a.m.22 views

GHSA-93C7-2942-3H47 ChakraCore information disclosure vulnerability

An information disclosure vulnerability exists when the browser scripting engine improperly handle object types, aka "Microsoft Scripting Engine Information Disclosure Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge, Internet Explorer 10...

4.2CVSS5.3AI score0.05649EPSS
Exploits0References7
CISA KEV Catalog
CISA KEV Catalog
added 2022/03/25 12:0 a.m.21 views

Microsoft Scripting Engine Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer...

7.6CVSS2.7AI score0.8249EPSS
In wildExploits8
CNNVD
CNNVD
added 2021/11/09 12:0 a.m.2 views

Microsoft Windows Scripting 缓冲区错误漏洞

Microsoft Windows Scripting is a scripting language for the Windows operating system from Microsoft Corporation USA.A memory corruption vulnerability exists in the Microsoft Chakra Scripting Engine, which can be exploited by attackers to execute code on the target host...

7.5CVSS6AI score0.02954EPSS
Exploits0References4
CNNVD
CNNVD
added 2021/09/14 12:0 a.m.1 views

Microsoft Scripting Engine缓冲区错误漏洞

Microsoft Scripting Engine is a tool from Microsoft Corporation USA that provides a scripting engine for JScript and VBScript. A buffer error vulnerability exists in Microsoft Scripting Engine. Windows Server 2008 for x64-based Systems Service Pack 2,Windows Server 2008 for x64-based Systems...

8.1CVSS7.8AI score0.07765EPSS
Exploits0References5
VulnCheck KEV
VulnCheck KEV
added 2021/08/17 12:0 a.m.0 views

VulnCheck KEV: CVE-2016-3206

The Microsoft 1 JScript 5.8 and 2 VBScript 5.7 and 5.8 engines, as used in Internet Explorer 9 through 11 and other products, allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting Engine Memory Corruption...

7.6CVSS7.5AI score0.14916EPSS
Exploits0References1
VulnCheck KEV
VulnCheck KEV
added 2021/08/17 12:0 a.m.2 views

VulnCheck KEV: CVE-2017-0015

A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. These vulnerabilities could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user...

7.6CVSS7.9AI score0.26145EPSS
Exploits4References1
VulnCheck KEV
VulnCheck KEV
added 2021/08/17 12:0 a.m.1 views

VulnCheck KEV: CVE-2017-0067

A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. These vulnerabilities could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user...

7.6CVSS7.9AI score0.16013EPSS
Exploits4References1
CNNVD
CNNVD
added 2021/08/10 12:0 a.m.2 views

Microsoft Scripting Engine 缓冲区错误漏洞

Microsoft Scripting Engine is a tool from Microsoft Corporation USA that provides a scripting engine for JScript and VBScript. A buffer error vulnerability exists in Microsoft Microsoft Scripting Engine. The following products and versions are affected:Windows 10 Version 1809 for 32-bit...

8.8CVSS7.1AI score0.03053EPSS
Exploits0References7
CNNVD
CNNVD
added 2021/07/13 12:0 a.m.4 views

Microsoft Scripting Engine 缓冲区错误漏洞

Microsoft Scripting Engine is a tool from Microsoft Corporation USA that provides a scripting engine for JScript and VBScript. A buffer error vulnerability exists in Microsoft Scripting Engine. The following products and versions are affected:Windows 10 Version 1809 for 32-bit Systems,Windows 10...

9.3CVSS8AI score0.02032EPSS
Exploits0References4
CNNVD
CNNVD
added 2021/06/08 12:0 a.m.1 views

Microsoft Scripting Engine 缓冲区错误漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in the Microsoft Scripting Engine. The following products and versions are affected:Windows 10 Version 21H1 for x64-based...

7.8CVSS6.8AI score0.05857EPSS
Exploits0References6
Rows per page
Query Builder