CVE-2020-0826: Out-of-bounds Write

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0768, CVE-2020-0823, CVE-2020-0825, CVE-2020-0827, CVE-2020-0828, CVE-2020-0829,...

Microsoft Issues March 2020 Updates to Patch 115 Security Flaws

Microsoft today released security updates to fix a total of 115 new security vulnerabilities in various versions of its Windows operating system and related software—making March 2020 edition the biggest ever Patch Tuesday in the company's history. Of the 115 bugs spanning its various products —...

Microsoft Internet Explorer Scripting Engine Remote Code Execution Vulnerability (CNVD-2020-19968)

Microsoft Internet Explorer IE is a Web browser that comes with the Windows operating system from the American company Microsoft. A remote code execution vulnerability exists in the way the scripting engine handles memory objects in Microsoft IE 11. An attacker could exploit this vulnerability to...

Microsoft Internet Explorer Scripting Engine Remote Code Execution Vulnerability (CNVD-2020-19962)

Microsoft Internet Explorer IE is a Web browser that comes with the Windows operating system from the American company Microsoft. A remote code execution vulnerability exists in the way the scripting engine handles memory objects in Microsoft IE 11. An attacker could exploit this vulnerability to...

March 10, 2020—KB4540689 (OS Build 17134.1365)

None None...

Chakra Scripting Engine Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge HTML-based. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who...

VBScript Remote Code Execution Vulnerability

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerabili...

Chakra Scripting Engine Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge HTML-based. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who...

March 10, 2020—KB4538461 (OS Build 17763.1098)

None None...

March 10, 2020—KB4541510 (Monthly Rollup)

None None...

KLA11681 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A memory corruption vulnerability in Scripting Engine can be exploited remotely to...

PT-2020-1918

Name of the Vulnerable Software and Affected Versions Microsoft Edge HTML-based affected versions not specified Description A remote code execution issue exists due to the way the Chakra scripting engine handles objects in memory. This could allow an attacker to execute arbitrary code in the...

PT-2020-1919

Name of the Vulnerable Software and Affected Versions Microsoft Edge HTML-based affected versions not specified Description A remote code execution issue exists due to the way the Chakra scripting engine handles objects in memory. This could allow an attacker to execute arbitrary code in the...

PT-2020-1773

Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description The issue is related to a remote code execution vulnerability in the ChakraCore scripting engine, which handles objects in memory. This vulnerability could allow an attacker to corrupt...

PT-2020-1775

Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Internet Explorer affected versions not specified Description The issue is related to a remote code execution vulnerability in the way the scripting engine handles objects in memory in Microsoft...

PT-2020-1821

Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description The issue is related to a remote code execution problem in the ChakraCore scripting engine, caused by a buffer overflow in memory. This could allow an attacker to execute arbitrary cod...

PT-2020-1739

Name of the Vulnerable Software and Affected Versions Internet Explorer affected versions not specified Description The issue is related to a remote code execution problem in the way the scripting engine handles objects in memory. This could allow an attacker to execute arbitrary code with the sa...

PT-2020-1742

Name of the Vulnerable Software and Affected Versions Internet Explorer affected versions not specified Description The issue is related to a remote code execution vulnerability in the way the scripting engine handles objects in memory. This could allow an attacker to execute arbitrary code with...

Microsoft Patch Tuesday — Feb. 2020: Vulnerability disclosures and Snort coverage

By Jon Munshaw. Microsoft released its monthly security update today, disclosing vulnerabilities across many of its products and releasing corresponding updates. This month's Patch Tuesday covers 98 vulnerabilities, 12 of which are considered critical and 84 that are considered important. There a...

CVE-2020-0767

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0673, CVE-2020-0674, CVE-2020-0710, CVE-2020-0711, CVE-2020-0712, CVE-2020-0713...