95 matches found
CVE-2018-8353-POC
CVE-2018-8353 POC Simple poc of CVE-2018-8353 Microsoft Scripting Engine Use After Free saurce : https://bugs.chromium.org/p/project-zero/issues/detail?id=1506...
CVE-2026-88193
Heap-based buffer overflow in Microsoft Scripting Engine allows an authorized attacker to elevate privileges locally...
CVE-2026-88193
A heap-based buffer overflow exists in the Microsoft Scripting Engine , which can be exploited by an authorized attacker to achieve local privilege elevation . The vulnerability is confirmed with a CVSS 3.1 base score of 7.8, indicating a High severity impact on confidentiality, integrity, and av...
Microsoft Scripting Engine Elevation of Privilege Vulnerability
Heap-based buffer overflow in Microsoft Scripting Engine allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-88193: Microsoft Scripting Engine Elevation of Privilege Vulnerability
Heap-based buffer overflow in Microsoft Scripting Engine allows an authorized attacker to elevate privileges locally...
PT-2026-112999
Name of the Vulnerable Software and Affected Versions Microsoft Scripting Engine affected versions not specified Description A heap-based buffer overflow occurs in the Microsoft Scripting Engine, which allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow is a...
CVE-2026-88193: Heap-based Buffer Overflow
Heap-based buffer overflow in Microsoft Scripting Engine allows an authorized attacker to elevate privileges locally...
CVE-2019-0835
An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory, aka 'Microsoft Scripting Engine Information Disclosure Vulnerability'...
CVE-2025-30397
Access of resource using incompatible type 'type confusion' in Microsoft Scripting Engine allows an unauthorized attacker to execute code over a network...
CVE-2025-30397
Access of resource using incompatible type 'type confusion' in Microsoft Scripting Engine allows an unauthorized attacker to execute code over a network...
CVE-2025-30397
Access of resource using incompatible type 'type confusion' in Microsoft Scripting Engine allows an unauthorized attacker to execute code over a network...
Scripting Engine Memory Corruption Vulnerability
Access of resource using incompatible type 'type confusion' in Microsoft Scripting Engine allows an unauthorized attacker to execute code over a network...
CVE-2025-30397: Access of Resource Using Incompatible Type
Access of resource using incompatible type 'type confusion' in Microsoft Scripting Engine allows an unauthorized attacker to execute code over a network...
CVE-2025-30397
Access of resource using incompatible type ‘type confusion’ in Microsoft Scripting Engine allows an unauthorized attacker to execute code over a network. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...
PT-2025-21001
Name of the Vulnerable Software and Affected Versions Microsoft Scripting Engine affected versions not specified Description The issue is related to a type confusion vulnerability in the Microsoft Scripting Engine, which allows an unauthorized attacker to execute code over a network. This can be...
Microsoft Scripting Engine security vulnerabilities
Microsoft Scripting Engine is a tool from Microsoft USA that provides a scripting engine for JScript and VBScript. A security vulnerability exists in Microsoft Scripting Engine. An attacker exploiting this vulnerability could remotely execute code. The following products and versions are affected...
Microsoft Scripting Engine security vulnerabilities
Microsoft Scripting Engine is a tool from Microsoft USA that provides a scripting engine for JScript and VBScript. A security vulnerability exists in Microsoft Scripting Engine. An attacker has exploited the vulnerability to cause a denial of service on the system. The following products and...
June 14, 2022—Hotpatch KB5014677 (OS Build 20348.770)
None None...
GHSA-93C7-2942-3H47 ChakraCore information disclosure vulnerability
An information disclosure vulnerability exists when the browser scripting engine improperly handle object types, aka "Microsoft Scripting Engine Information Disclosure Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge, Internet Explorer 10...
