Privilege Escalation

microsoft.chakracore is vulnerable to privilege escalation. This happens when the regex parser does not properly handle a regex with more than 2^15 capturing groups, causing an integer overflow that can allow a non-privileged user to gain the rights of current user. This CVE ID is different from...

Remote Code Execution (RCE)

microsoft.chakracore is vulnerable to remote code execution. This happens because the scripting engine does not properly handle the objects in memory, causing memory corruption. This CVE ID is different from CVE-2017-11886, CVE-2017-11889, CVE-2017-11890, CVE-2017-11893, CVE-2017-11894,...

Information Disclosure

microsoft.chakracore is affected by an information disclosure vulnerability which discloses the contents of its memory due an out-of-bounds read vulnerability in AppendLeftOverItemsFromEndSegment. This vulnerability only affects Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, 1709, and...

Remote Code Execution (RCE)

microsoft.chakracore is vulnerable to remote code execution. The scripting engine does not properly handle the objects in memory, causing memory corruption which could allow an attacker to execute code in the context of the current user. This CVE ID is different from CVE-2018-0758, CVE-2018-0762,...

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser allows a hacker to execute arbitrary code.

The vulnerability of the ChakraCore JavaScript script handler in the Microsoft Edge browser is caused by an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted web page...

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser allows a hacker to execute arbitrary code.

The vulnerability of the ChakraCore JavaScript script handler in the Microsoft Edge browser is caused by an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted web page...

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser allows a hacker to execute arbitrary code.

The vulnerability of the ChakraCore JavaScript script handler in the Microsoft Edge browser is caused by an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted web page...

The vulnerability of Microsoft Edge’s JavaScript script handler allows a hacker to execute arbitrary code.

The vulnerability of Microsoft Edge’s JavaScript script handler arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted web page...

The vulnerability of the JavaScript script handler ChakraCore in Microsoft Edge and Internet Explorer browsers allows a perpetrator to execute arbitrary code.

The vulnerability of the JavaScript script handler ChakraCore in Microsoft Edge and Internet Explorer browsers is caused by an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Privilege Escalation

microsoft.chakracore is vulnerable to privilege escalation. The vulnerability exists because the compiler contains a bug during escape analysis, leading to privilege escalation. This CVE ID is different from CVE-2017-11886, CVE-2017-11889, CVE-2017-11890, CVE-2017-11893, CVE-2017-11894,...

Information Leakage

microsoft.chakracore is vulnerable to information leakage. This happens because the finalName parameter in the ConstructName function of JavascriptObject.cpp can contain null characters in between, leaving part of it uninitialized. This CVE ID is unique from CVE-2017-11887 and CVE-2017-11906.This...

Remote Code Execution (RCE)

microsoft.chakracore is vulnerable to remote code execution. It exists because the CreateLabel function in IRBuilderAsmJs.cpp, does not properly check instrPrevparameter, causing memory corruption which allows attacker to trigger RCE. This CVE ID is different from CVE-2017-11886, CVE-2017-11889,...

The vulnerability of the JavaScript script handler ChakraCore in browsers Internet Explorer and Microsoft Edge allows a hacker to execute arbitrary code.

The vulnerability of the JavaScript script handler ChakraCore in browsers Internet Explorer and Microsoft Edge arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted web...

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser allows a hacker to execute arbitrary code.

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser is caused by an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially crafted web page...

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser, caused by an operation that goes beyond the buffer in memory, allows attackers to execute arbitrary code.

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser is caused by an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using specially crafted web page content...

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser, caused by an operation that goes beyond the buffer in memory, allows attackers to execute arbitrary code.

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser is caused by an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially crafted web page...

Microsoft Windows 10: Search suggestions in Address bar (Edge)

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winedgesearchsuggaddrbar.nasl 11344 2018-09-12 06:57:52Z emoss $ Check value for Configure search suggestions in Address bar Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net...

Microsoft Windows 10: InPrivate browsing (Edge)

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winedgeinprivatebrowsing.nasl 11344 2018-09-12 06:57:52Z emoss $ Check value for Allow InPrivate browsing Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is fre...

Microsoft Windows 10: Windows Defender SmartScreen (Edge)

This policy setting lets you configure whether to turn on Windows Defender SmartScreen. Windows Defender SmartScreen provides warning messages to help protect your employees from potential phishing scams and malicious software. By default, Windows Defender SmartScreen is turned on. If you enable...

Microsoft Windows 10: Localhost IP address for WebRTC (Edge)

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winedgelocalhostipwebrtc.nasl 11344 2018-09-12 06:57:52Z emoss $ Check value for Prevent using Localhost IP address for WebRTC Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.ne...