Lucene search
K

80 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 2:58 a.m.5 views

CVE-2019-0835

An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory, aka 'Microsoft Scripting Engine Information Disclosure Vulnerability'...

6.5CVSS7.7AI score0.25343EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/15 5:14 p.m.17 views

CVE-2025-30397

Access of resource using incompatible type 'type confusion' in Microsoft Scripting Engine allows an unauthorized attacker to execute code over a network...

7.5CVSS7.3AI score0.20737EPSS
Exploits7References3
NVD
NVD
added 2025/05/13 5:16 p.m.44 views

CVE-2025-30397

Access of resource using incompatible type 'type confusion' in Microsoft Scripting Engine allows an unauthorized attacker to execute code over a network...

7.5CVSS0.20737EPSS
Exploits7References4
OSV
OSV
added 2025/05/13 5:16 p.m.2 views

CVE-2025-30397

Access of resource using incompatible type 'type confusion' in Microsoft Scripting Engine allows an unauthorized attacker to execute code over a network...

7.5CVSS5.9AI score0.20737EPSS
Exploits7References4
Microsoft CVE
Microsoft CVE
added 2025/05/13 7:0 a.m.23 views

Scripting Engine Memory Corruption Vulnerability

Access of resource using incompatible type 'type confusion' in Microsoft Scripting Engine allows an unauthorized attacker to execute code over a network...

7.5CVSS6.9AI score0.20737EPSS
Exploits7
CNNVD
CNNVD
added 2025/05/13 12:0 a.m.7 views

Microsoft Scripting Engine 安全漏洞

Microsoft Scripting Engine is a tool from Microsoft USA that provides a scripting engine for JScript and VBScript. A security vulnerability exists in Microsoft Scripting Engine. An attacker exploiting this vulnerability could remotely execute code. The following products and versions are affected...

7.5CVSS8.8AI score0.20737EPSS
Exploits7References2
ATTACKERKB
ATTACKERKB
added 2025/05/13 12:0 a.m.29 views

CVE-2025-30397

Access of resource using incompatible type ‘type confusion’ in Microsoft Scripting Engine allows an unauthorized attacker to execute code over a network. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

7.5CVSS7.1AI score0.20737EPSS
In wildExploits7References2
Positive Technologies
Positive Technologies
added 2025/05/13 12:0 a.m.6 views

PT-2025-21001

Name of the Vulnerable Software and Affected Versions Microsoft Scripting Engine affected versions not specified Description The issue is related to a type confusion vulnerability in the Microsoft Scripting Engine, which allows an unauthorized attacker to execute code over a network. This can be...

7.6CVSS8.5AI score0.20737EPSS
Exploits7References65
CNNVD
CNNVD
added 2024/08/13 12:0 a.m.1 views

Microsoft Scripting Engine 安全漏洞

Microsoft Scripting Engine is a tool from Microsoft USA that provides a scripting engine for JScript and VBScript. A security vulnerability exists in Microsoft Scripting Engine. An attacker has exploited the vulnerability to cause a denial of service on the system. The following products and...

7.5CVSS8.7AI score0.30231EPSS
Exploits0References2
Microsoft KB
Microsoft KB
added 2022/06/14 7:0 a.m.132 views

June 14, 2022—Hotpatch KB5014677 (OS Build 20348.770)

June 14, 2022—Hotpatch KB5014677 OS Build 20348.770 Improvements and fixes This security update includes quality improvements. Key changes include: Addresses an issue in which a principal in a trusted MIT realm fails to obtain a Kerberos service ticket from Active Directory domain controllers DC...

9.3CVSS7.4AI score0.25552EPSS
Exploits0
OSV
OSV
added 2022/05/14 2:3 a.m.22 views

GHSA-93C7-2942-3H47 ChakraCore information disclosure vulnerability

An information disclosure vulnerability exists when the browser scripting engine improperly handle object types, aka "Microsoft Scripting Engine Information Disclosure Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge, Internet Explorer 10...

4.2CVSS5.3AI score0.05649EPSS
Exploits0References7
CISA KEV Catalog
CISA KEV Catalog
added 2022/03/25 12:0 a.m.21 views

Microsoft Scripting Engine Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer...

7.6CVSS2.7AI score0.8249EPSS
In wildExploits8
CNNVD
CNNVD
added 2021/09/14 12:0 a.m.1 views

Microsoft Scripting Engine缓冲区错误漏洞

Microsoft Scripting Engine is a tool from Microsoft Corporation USA that provides a scripting engine for JScript and VBScript. A buffer error vulnerability exists in Microsoft Scripting Engine. Windows Server 2008 for x64-based Systems Service Pack 2,Windows Server 2008 for x64-based Systems...

8.1CVSS7.8AI score0.07765EPSS
Exploits0References5
CNNVD
CNNVD
added 2021/08/10 12:0 a.m.2 views

Microsoft Scripting Engine 缓冲区错误漏洞

Microsoft Scripting Engine is a tool from Microsoft Corporation USA that provides a scripting engine for JScript and VBScript. A buffer error vulnerability exists in Microsoft Microsoft Scripting Engine. The following products and versions are affected:Windows 10 Version 1809 for 32-bit...

8.8CVSS7.1AI score0.03053EPSS
Exploits0References7
CNNVD
CNNVD
added 2021/07/13 12:0 a.m.4 views

Microsoft Scripting Engine 缓冲区错误漏洞

Microsoft Scripting Engine is a tool from Microsoft Corporation USA that provides a scripting engine for JScript and VBScript. A buffer error vulnerability exists in Microsoft Scripting Engine. The following products and versions are affected:Windows 10 Version 1809 for 32-bit Systems,Windows 10...

9.3CVSS8AI score0.02032EPSS
Exploits0References4
CNNVD
CNNVD
added 2021/06/08 12:0 a.m.1 views

Microsoft Scripting Engine 缓冲区错误漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in the Microsoft Scripting Engine. The following products and versions are affected:Windows 10 Version 21H1 for x64-based...

7.8CVSS6.8AI score0.05857EPSS
Exploits0References6
Microsoft KB
Microsoft KB
added 2021/05/11 7:0 a.m.91 views

May 11, 2021—KB5003233 (Monthly Rollup)

May 11, 2021—KB5003233 Monthly Rollup Important: Verify that you have installed the required updates listed in the How to get this update section before installing this update. For information about the various types of Windows updates, such as critical, security, driver, service packs, and so on...

9.9CVSS8.1AI score0.48791EPSS
Exploits10
Microsoft KB
Microsoft KB
added 2021/05/05 12:0 a.m.37 views

June 8, 2021 Public preview security update (KB5003645)

June 8, 2021 Public preview security update KB5003645 Improvements and fixes This public preview security update includes quality improvements. Key changes include: Addresses an issue in which a principal in a trusted MIT realm fails to obtain a Kerberos service ticket from Active Directory domai...

9CVSS8AI score0.25552EPSS
Exploits0
The Hacker News
The Hacker News
added 2020/11/11 10:9 a.m.423 views

Microsoft Releases Windows Security Updates For Critical Flaws

Microsoft formally released fixes for 112 newly discovered security vulnerabilities as part of its November 2020 Patch Tuesday, including an actively exploited zero-day flaw disclosed by Google's security team last week. The rollout addresses flaws, 17 of which are rated as Critical, 93 are rated...

10CVSS9.3AI score0.93031EPSS
Exploits4
Microsoft KB
Microsoft KB
added 2020/11/10 8:0 a.m.66 views

November 10, 2020—KB4586785 (OS Build 17134.1845) - EXPIRED

November 10, 2020—KB4586785 OS Build 17134.1845 - EXPIRED NEW 8/5/21 EXPIRATION NOTICEIMPORTANT As of 8/5/2021, this KB is no longer available from Windows Update, the Microsoft Update Catalog, or other release channels. We recommend that you update your devices to the latest security quality...

9.8CVSS7.3AI score0.2052EPSS
Exploits4
Rows per page
Query Builder