Lucene search
+L

3231 matches found

Github Security Blog
Github Security Blog
•added 2022/05/14 2:23 a.m.•31 views

ChakraCore RCE Vulnerability

The scripting engines in Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, as demonstrated by the Chakra JavaScript engine, aka "Scripting Engine Memory Corruption Vulnerability...

7.6CVSS7.4AI score0.16843EPSS
SaveExploits0References9Affected Software1
OSV
OSV
•added 2022/05/14 2:22 a.m.•64 views

GHSA-36C3-JCM2-RM3J ChakraCore RCE Vulnerability

The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-3386, CVE-2016-3389, and...

7.5CVSS7.2AI score0.57866EPSS
SaveExploits1References6
OSV
OSV
•added 2022/05/14 2:22 a.m.•26 views

GHSA-WCVC-RHFJ-997G ChakraCore RCE Vulnerability

The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-7200, CVE-2016-7201,...

7.5CVSS8.4AI score0.64892EPSS
SaveExploits1References8
OSV
OSV
•added 2022/05/14 2:22 a.m.•162 views

GHSA-HH3V-5CHW-WGH7 ChakraCore RCE Vulnerability

The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-7200, CVE-2016-7201,...

7.5CVSS8.4AI score0.66469EPSS
SaveExploits2References8
Github Security Blog
Github Security Blog
•added 2022/05/14 2:22 a.m.•32 views

ChakraCore RCE Vulnerability

The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-7200, CVE-2016-7201,...

7.6CVSS7.5AI score0.1628EPSS
SaveExploits0References7Affected Software1
OSV
OSV
•added 2022/05/14 2:03 a.m.•54 views

GHSA-93C7-2942-3H47 ChakraCore information disclosure vulnerability

An information disclosure vulnerability exists when the browser scripting engine improperly handle object types, aka "Microsoft Scripting Engine Information Disclosure Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge, Internet Explorer 10...

4.2CVSS5.3AI score0.03121EPSS
SaveExploits0References7
OSV
OSV
•added 2022/05/14 1:06 a.m.•37 views

GHSA-9QPF-V72J-J9QH ChakraCore vulnerable to remote code execution

ChakraCore and Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability"...

7.5CVSS8AI score0.6546EPSS
SaveExploits4References8
OSV
OSV
•added 2022/05/14 1:06 a.m.•50 views

GHSA-C6R3-GHJW-HGRJ ChakraCore vulnerable to remote code execution

ChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability"...

7.5CVSS7.9AI score0.68491EPSS
SaveExploits4References8
Github Security Blog
Github Security Blog
•added 2022/05/14 1:06 a.m.•41 views

ChakraCore vulnerable to remote code execution

ChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability"...

7.6CVSS7.4AI score0.68491EPSS
SaveExploits4References8Affected Software1
OSV
OSV
•added 2022/05/13 1:53 a.m.•33 views

GHSA-W3QR-8V4R-592M ChakraCore information disclosure vulnerability

An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory in Microsoft browsers, aka "Scripting Engine Information Disclosure Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge...

4.3CVSS5.5AI score0.05588EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
•added 2022/05/13 1:53 a.m.•55 views

ChakraCore information disclosure vulnerability

An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory in Microsoft browsers, aka "Scripting Engine Information Disclosure Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge...

4.3CVSS5.7AI score0.05588EPSS
SaveExploits0References6Affected Software1
OSV
OSV
•added 2022/05/13 1:48 a.m.•47 views

GHSA-FV8M-P45W-GF38 ChakraCore RCE Vulnerability

Microsoft ChakraCore allows an attacker to bypass Control Flow Guard CFG in conjunction with another vulnerability to run arbitrary code on a target system, due to how the Chakra scripting engine handles accessing memory, aka "Scripting Engine Security Feature Bypass"...

7.5CVSS7.3AI score0.03686EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
•added 2022/05/13 1:48 a.m.•35 views

ChakraCore RCE Vulnerability

Microsoft ChakraCore allows an attacker to bypass Control Flow Guard CFG in conjunction with another vulnerability to run arbitrary code on a target system, due to how the Chakra scripting engine handles accessing memory, aka "Scripting Engine Security Feature Bypass"...

8.5CVSS6.9AI score0.03686EPSS
SaveExploits0References6Affected Software1
OSV
OSV
•added 2022/05/13 1:42 a.m.•58 views

GHSA-C79V-2RJQ-965M ChakraCore vulnerable to privilege escalation

ChakraCore allows an attacker to gain the same user rights as the current user, due to the way that the ChakraCore scripting engine handles objects in memory. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take...

9.8CVSS9.4AI score0.09513EPSS
SaveExploits0References8
Github Security Blog
Github Security Blog
•added 2022/05/13 1:42 a.m.•32 views

ChakraCore vulnerable to privilege escalation

ChakraCore allows an attacker to gain the same user rights as the current user, due to the way that the ChakraCore scripting engine handles objects in memory. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take...

10CVSS8.6AI score0.09513EPSS
SaveExploits0References8Affected Software1
OSV
OSV
•added 2022/05/13 1:21 a.m.•22 views

GHSA-6C6R-39CV-X5FQ Chakra JIT server Privilege Escalation

A vulnerability exists in Microsoft Chakra JIT server, aka 'Scripting Engine Elevation of Privileges Vulnerability'...

8.1CVSS8.6AI score0.04345EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
•added 2022/05/13 1:21 a.m.•33 views

Chakra JIT server Privilege Escalation

A vulnerability exists in Microsoft Chakra JIT server, aka 'Scripting Engine Elevation of Privileges Vulnerability'...

8.1CVSS6.8AI score0.04345EPSS
SaveExploits0References6Affected Software1
OSV
OSV
•added 2022/05/13 1:21 a.m.•42 views

GHSA-WWFW-M54G-GV72 ChakraCore information disclosure vulnerability

An information disclosure vulnerability exists when Chakra improperly discloses the contents of its memory, which could provide an attacker with information to further compromise the user's computer or data.To exploit the vulnerability, an attacker must know the memory address of where the object...

4.3CVSS4.8AI score0.05432EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
•added 2022/05/13 1:21 a.m.•55 views

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2019-0539, CVE-2019-0567...

7.6CVSS7AI score0.69455EPSS
SaveExploits4References6Affected Software1
OSV
OSV
•added 2022/05/13 1:21 a.m.•45 views

GHSA-2M5H-6G38-JJF2 ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2019-0539, CVE-2019-0567...

7.5CVSS7.5AI score0.69455EPSS
SaveExploits4References6
Rows per page
Query Builder