Lucene search
+L

10974 matches found

OSV
OSV
added 2022/05/17 2:13 a.m.41 views

GHSA-H6M7-JPHX-F9P5 ChakraCore information disclosure vulnerability

Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to obtain information to further compromise the user's system due to the Chakra scripting engine not properly handling objects in memory, aka "Scripting Engine Information Disclosure Vulnerability"...

4.3CVSS4.2AI score0.06536EPSS
SaveExploits2References7
Github Security Blog
Github Security Blog
added 2022/05/17 2:13 a.m.38 views

ChakraCore information disclosure vulnerability

Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to obtain information to further compromise the user's system due to the Chakra scripting engine not properly handling objects in memory, aka "Scripting Engine Information Disclosure Vulnerability"...

4.3CVSS4.5AI score0.06536EPSS
SaveExploits2References7Affected Software1
OSV
OSV
added 2022/05/17 12:32 a.m.19 views

GHSA-8H76-7VC3-MJ3V ChakraCore RCE Vulnerability

ChakraCore and Microsoft Edge in Microsoft Windows 10 1703 allow an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11793,...

7.5CVSS7.8AI score0.08791EPSS
SaveExploits0References7
Github Security Blog
Github Security Blog
added 2022/05/17 12:32 a.m.36 views

ChakraCore RCE Vulnerability

ChakraCore and Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11792,...

7.6CVSS7.2AI score0.08791EPSS
SaveExploits0References7Affected Software1
OSV
OSV
added 2022/05/17 12:32 a.m.37 views

GHSA-RHWH-JW9H-4M49 ChakraCore RCE Vulnerability

ChakraCore and Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11792,...

7.5CVSS7.8AI score0.08791EPSS
SaveExploits0References7
Github Security Blog
Github Security Blog
added 2022/05/17 12:32 a.m.27 views

ChakraCore RCE Vulnerability

ChakraCore and Microsoft Edge in Microsoft Windows 10 1703 allow an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11793,...

7.6CVSS7.2AI score0.08791EPSS
SaveExploits0References7Affected Software1
Github Security Blog
Github Security Blog
added 2022/05/17 12:32 a.m.28 views

ChakraCore RCE Vulnerability

ChakraCore and Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11792,...

7.6CVSS7.2AI score0.08791EPSS
SaveExploits0References7Affected Software1
Github Security Blog
Github Security Blog
added 2022/05/17 12:32 a.m.42 views

ChakraCore RCE Vulnerability

ChakraCore and Microsoft Edge in Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11792,...

7.6CVSS7.2AI score0.08791EPSS
SaveExploits0References7Affected Software1
Github Security Blog
Github Security Blog
added 2022/05/17 12:32 a.m.35 views

ChakraCore RCE Vulnerability

ChakraCore and Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11792,...

7.6CVSS7.2AI score0.08791EPSS
SaveExploits0References7Affected Software1
OSV
OSV
added 2022/05/17 12:32 a.m.26 views

GHSA-6R3X-5GWG-G642 ChakraCore RCE Vulnerability

ChakraCore and Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11792,...

7.5CVSS7.8AI score0.08791EPSS
SaveExploits0References7
OSV
OSV
added 2022/05/17 12:32 a.m.24 views

GHSA-3C78-M682-8WP9 ChakraCore RCE Vulnerability

ChakraCore and Microsoft Edge in Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11792,...

7.5CVSS7.8AI score0.08791EPSS
SaveExploits0References7
OSV
OSV
added 2022/05/17 12:32 a.m.17 views

GHSA-PX6P-JXWR-27MC ChakraCore RCE Vulnerability

ChakraCore and Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11792,...

7.5CVSS7.8AI score0.08791EPSS
SaveExploits0References7
Github Security Blog
Github Security Blog
added 2022/05/17 12:32 a.m.35 views

ChakraCore RCE Vulnerability

ChakraCore and Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11792,...

7.6CVSS7.2AI score0.08791EPSS
SaveExploits0References7Affected Software1
OSV
OSV
added 2022/05/17 12:32 a.m.26 views

GHSA-6MW4-PHMC-X477 ChakraCore RCE Vulnerability

ChakraCore and Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11792,...

7.5CVSS7.8AI score0.08791EPSS
SaveExploits0References7
Github Security Blog
Github Security Blog
added 2022/05/17 12:19 a.m.39 views

Chakra Core vulnerable to privilege escalation when writing to JavaScript null scope objects

ChakraCore and Microsoft Edge in Windows 10 1703, 1709, and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory. This could be exploited using write-AV when writing to a slot of a JavaScript nu...

7.6CVSS6.9AI score0.45877EPSS
SaveExploits4References8Affected Software1
OSV
OSV
added 2022/05/17 12:19 a.m.46 views

GHSA-PCR8-75V3-W9PF Chakra Core vulnerable to privilege escalation due to type confusion

ChakraCore and Microsoft Edge in Windows 10 1709 and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". Individual Export in module...

7.5CVSS7.6AI score0.08079EPSS
SaveExploits0References7
Github Security Blog
Github Security Blog
added 2022/05/17 12:19 a.m.38 views

Chakra Core vulnerable to privilege escalation due to type confusion

ChakraCore and Microsoft Edge in Windows 10 1709 and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". Individual Export in module...

7.6CVSS7AI score0.08079EPSS
SaveExploits0References7Affected Software1
Github Security Blog
Github Security Blog
added 2022/05/17 12:19 a.m.36 views

Chakra Core vulnerable to privilege escalation due to reading an invalid pointer

ChakraCore and Microsoft Edge in Windows 10 1703, 1709, and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". When trying to get...

7.6CVSS7AI score0.08148EPSS
SaveExploits0References7Affected Software1
OSV
OSV
added 2022/05/17 12:19 a.m.37 views

GHSA-43QP-HPHF-5RJW Chakra Core vulnerable to privilege escalation due to reading an invalid pointer

ChakraCore and Microsoft Edge in Windows 10 1703, 1709, and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". When trying to get...

7.5CVSS7.6AI score0.08148EPSS
SaveExploits0References7
OpenVAS
OpenVAS
added 2022/05/16 12:00 a.m.34 views

Microsoft Edge (Chromium-Based) Use after free Vulnerability (May 2022)

This host is missing an important security update according to Microsoft Edge Chromium-Based updates. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

8.8CVSS9.3AI score0.10127EPSS
SaveExploits1References2
Rows per page
Query Builder