Lucene search
K

97 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 2:58 a.m.7 views

CVE-2019-0835

An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory, aka 'Microsoft Scripting Engine Information Disclosure Vulnerability'...

6.5CVSS7.7AI score0.06736EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/15 5:14 p.m.20 views

CVE-2025-30397

Access of resource using incompatible type 'type confusion' in Microsoft Scripting Engine allows an unauthorized attacker to execute code over a network...

7.5CVSS7.3AI score0.21562EPSS
Exploits7References3
OSV
OSV
added 2025/05/13 5:16 p.m.3 views

CVE-2025-30397

Access of resource using incompatible type 'type confusion' in Microsoft Scripting Engine allows an unauthorized attacker to execute code over a network...

7.5CVSS5.9AI score0.21562EPSS
Exploits7References4
NVD
NVD
added 2025/05/13 5:16 p.m.56 views

CVE-2025-30397

Access of resource using incompatible type 'type confusion' in Microsoft Scripting Engine allows an unauthorized attacker to execute code over a network...

7.5CVSS0.21562EPSS
Exploits7References4
Microsoft CVE
Microsoft CVE
added 2025/05/13 7:0 a.m.31 views

Scripting Engine Memory Corruption Vulnerability

Access of resource using incompatible type 'type confusion' in Microsoft Scripting Engine allows an unauthorized attacker to execute code over a network...

7.5CVSS6.9AI score0.21562EPSS
Exploits7
CNNVD
CNNVD
added 2025/05/13 12:0 a.m.7 views

Microsoft Scripting Engine 安全漏洞

Microsoft Scripting Engine is a tool from Microsoft USA that provides a scripting engine for JScript and VBScript. A security vulnerability exists in Microsoft Scripting Engine. An attacker exploiting this vulnerability could remotely execute code. The following products and versions are affected...

7.5CVSS8.8AI score0.21562EPSS
Exploits7References2
ATTACKERKB
ATTACKERKB
added 2025/05/13 12:0 a.m.32 views

CVE-2025-30397

Access of resource using incompatible type ‘type confusion’ in Microsoft Scripting Engine allows an unauthorized attacker to execute code over a network. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

7.5CVSS7.1AI score0.21562EPSS
In wildExploits7References2
Positive Technologies
Positive Technologies
added 2025/05/13 12:0 a.m.7 views

PT-2025-21001

Name of the Vulnerable Software and Affected Versions Microsoft Scripting Engine affected versions not specified Description The issue is related to a type confusion vulnerability in the Microsoft Scripting Engine, which allows an unauthorized attacker to execute code over a network. This can be...

7.6CVSS8.5AI score0.21562EPSS
Exploits7References65
CNNVD
CNNVD
added 2024/08/13 12:0 a.m.2 views

Microsoft Scripting Engine 安全漏洞

Microsoft Scripting Engine is a tool from Microsoft USA that provides a scripting engine for JScript and VBScript. A security vulnerability exists in Microsoft Scripting Engine. An attacker has exploited the vulnerability to cause a denial of service on the system. The following products and...

7.5CVSS8.7AI score0.39457EPSS
Exploits0References2
Microsoft KB
Microsoft KB
added 2022/06/14 7:0 a.m.138 views

June 14, 2022—Hotpatch KB5014677 (OS Build 20348.770)

None None...

9.3CVSS6.8AI score0.13794EPSS
Exploits0
OSV
OSV
added 2022/05/14 2:3 a.m.24 views

GHSA-93C7-2942-3H47 ChakraCore information disclosure vulnerability

An information disclosure vulnerability exists when the browser scripting engine improperly handle object types, aka "Microsoft Scripting Engine Information Disclosure Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge, Internet Explorer 10...

4.2CVSS5.3AI score0.03095EPSS
Exploits0References7
CISA KEV Catalog
CISA KEV Catalog
added 2022/03/25 12:0 a.m.22 views

Microsoft Scripting Engine Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer...

7.6CVSS2.7AI score0.61912EPSS
In wildExploits1
CNNVD
CNNVD
added 2021/11/09 12:0 a.m.5 views

Microsoft Windows Scripting 缓冲区错误漏洞

Microsoft Windows Scripting is a scripting language for the Windows operating system from Microsoft Corporation USA.A memory corruption vulnerability exists in the Microsoft Chakra Scripting Engine, which can be exploited by attackers to execute code on the target host...

7.5CVSS6AI score0.01913EPSS
Exploits0References4
CNNVD
CNNVD
added 2021/09/14 12:0 a.m.3 views

Microsoft Scripting Engine缓冲区错误漏洞

Microsoft Scripting Engine is a tool from Microsoft Corporation USA that provides a scripting engine for JScript and VBScript. A buffer error vulnerability exists in Microsoft Scripting Engine. Windows Server 2008 for x64-based Systems Service Pack 2,Windows Server 2008 for x64-based Systems...

8.1CVSS7.8AI score0.04548EPSS
Exploits0References5
VulnCheck KEV
VulnCheck KEV
added 2021/08/17 12:0 a.m.6 views

VulnCheck KEV: CVE-2016-3206

The Microsoft 1 JScript 5.8 and 2 VBScript 5.7 and 5.8 engines, as used in Internet Explorer 9 through 11 and other products, allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting Engine Memory Corruption...

7.6CVSS7.5AI score0.1466EPSS
Exploits0References1
VulnCheck KEV
VulnCheck KEV
added 2021/08/17 12:0 a.m.6 views

VulnCheck KEV: CVE-2017-0015

A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. These vulnerabilities could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user...

7.6CVSS7.9AI score0.26374EPSS
Exploits0References1
VulnCheck KEV
VulnCheck KEV
added 2021/08/17 12:0 a.m.5 views

VulnCheck KEV: CVE-2017-0067

A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. These vulnerabilities could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user...

7.6CVSS7.9AI score0.1523EPSS
Exploits4References1
CNNVD
CNNVD
added 2021/08/10 12:0 a.m.4 views

Microsoft Scripting Engine 缓冲区错误漏洞

Microsoft Scripting Engine is a tool from Microsoft Corporation USA that provides a scripting engine for JScript and VBScript. A buffer error vulnerability exists in Microsoft Microsoft Scripting Engine. The following products and versions are affected:Windows 10 Version 1809 for 32-bit...

8.8CVSS7.1AI score0.31825EPSS
Exploits0References7
CNNVD
CNNVD
added 2021/07/13 12:0 a.m.8 views

Microsoft Scripting Engine 缓冲区错误漏洞

Microsoft Scripting Engine is a tool from Microsoft Corporation USA that provides a scripting engine for JScript and VBScript. A buffer error vulnerability exists in Microsoft Scripting Engine. The following products and versions are affected:Windows 10 Version 1809 for 32-bit Systems,Windows 10...

9.3CVSS8AI score0.2667EPSS
Exploits0References4
CNNVD
CNNVD
added 2021/06/08 12:0 a.m.3 views

Microsoft Scripting Engine 缓冲区错误漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in the Microsoft Scripting Engine. The following products and versions are affected:Windows 10 Version 21H1 for x64-based...

7.8CVSS6.8AI score0.0923EPSS
Exploits0References6
Rows per page
Query Builder