Microsoft Patch Tuesday March 2020: a new record was set, SMBv3 “Wormable” RCE and updates for February goldies

SMBv3 "Wormable" RCE Without a doubt, the hottest Microsoft vulnerability in March 2020 is the "Wormable" Remote Code Execution in SMB v3 CVE-2020-0796. The most commonly used names for this vulnerability are EternalDarkness, SMBGhost and CoronaBlue. There was a strange story of how it was...

The vulnerability of the ChakraCore JavaScript script handler in the Microsoft Edge browser allows a hacker to execute arbitrary code.

The vulnerability of the ChakraCore JavaScript script handler in the Microsoft Edge browser is related to errors in memory object handling. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser allows a hacker to execute arbitrary code.

The vulnerability of the ChakraCore JavaScript script handler in the Microsoft Edge browser is caused by an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created web page...

Microsoft Edge Shares Privacy-Busting Telemetry, Research Alleges

Microsoft Edge is one of the least private web browsers — even more so than other popular browsers like Google Chrome and Mozilla Firefox — according to academic researchers. According to the analysis, from Douglas Leith with the School of Computer Science and Statistics at Trinity College in...

The vulnerability of the JavaScript script handler ChakraCore in Microsoft Edge’s web browser, based on EdgeHTML, relates to memory object handling flaws, allowing an attacker to execute arbitrary code.

The vulnerability of the JavaScript script handler ChakraCore in Microsoft Edge’s web browser, based on EdgeHTML, is related to memory object handling flaws. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2020-0816

A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka 'Microsoft Edge Memory Corruption Vulnerability'...

CVE-2020-0812

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge HTML-basedL, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0811...

CVE-2020-0812

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge HTML-basedL, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0811...

CVE-2020-0811

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge HTML-basedL, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0812...

Remote code execution

A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka 'Microsoft Edge Memory Corruption Vulnerability'...

Remote code execution

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge HTML-basedL, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0812...

Remote code execution

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge HTML-basedL, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0811...

CVE-2020-0816

A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka 'Microsoft Edge Memory Corruption Vulnerability'...

CVE-2020-0816

Technical details (affected product/component/versions/root cause/impact/fix) for CVE-2020-0816 are not publicly provided in the connected documents. Monitor for updates in the Red Hat, CNVD, NVD and CVE records as new information arises.

CVE-2020-0812

CVE-2020-0812 describes a remote code execution in the Chakra scripting engine used by Microsoft Edge. The vulnerability stems from how the engine handles objects in memory, leading to memory corruption. The affected component is Chakra memory management within Edge/ChakraCore. Risk details: CVSS...

CVE-2020-0812

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge HTML-basedL, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0811...

CVE-2020-0811

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge HTML-basedL, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0812...

CVE-2020-0811

CVE-2020-0811 describes a remote code execution vulnerability in the Chakra scripting engine used by Microsoft Edge (HTML-based). The issue is tied to memory handling of objects within Chakra, leading to memory corruption that could be exploited to execute arbitrary code. Related entries (e.g., C...

The vulnerability in the Microsoft Edge web browser, based on EdgeHTML, related to memory object handling flaws, allows an attacker to execute arbitrary code.

The vulnerability in the Microsoft Edge web browser, based on EdgeHTML, is related to memory object handling flaws. Exploiting this vulnerability allows a remote attacker to execute arbitrary code through a specially created web page...

The vulnerabilities of browsers Internet Explorer and Microsoft Edge, related to errors in processing inter-domain requests, allow attackers to disclose protected information.

The vulnerability of Internet Explorer and Microsoft Edge relates to errors in processing inter-domain requests. Exploiting this vulnerability can allow a malicious actor to disclose protected information through a specially created web page...