Lucene search
+L

2831 matches found

OSV
OSV
added 2022/05/14 2:03 a.m.40 views

GHSA-93C7-2942-3H47 ChakraCore information disclosure vulnerability

An information disclosure vulnerability exists when the browser scripting engine improperly handle object types, aka "Microsoft Scripting Engine Information Disclosure Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge, Internet Explorer 10...

4.2CVSS5.3AI score0.04792EPSS
SaveExploits0References7
OSV
OSV
added 2022/05/14 1:06 a.m.29 views

GHSA-9QPF-V72J-J9QH ChakraCore vulnerable to remote code execution

ChakraCore and Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability"...

7.5CVSS8AI score0.5213EPSS
SaveExploits4References8
OSV
OSV
added 2022/05/14 1:06 a.m.21 views

GHSA-C6R3-GHJW-HGRJ ChakraCore vulnerable to remote code execution

ChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability"...

7.5CVSS7.9AI score0.55108EPSS
SaveExploits4References8
Github Security Blog
Github Security Blog
added 2022/05/14 1:06 a.m.39 views

ChakraCore vulnerable to remote code execution

ChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability"...

7.6CVSS7.4AI score0.55108EPSS
SaveExploits4References8Affected Software1
OSV
OSV
added 2022/05/13 1:53 a.m.29 views

GHSA-W3QR-8V4R-592M ChakraCore information disclosure vulnerability

An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory in Microsoft browsers, aka "Scripting Engine Information Disclosure Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge...

4.3CVSS5.5AI score0.06012EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
added 2022/05/13 1:53 a.m.48 views

ChakraCore information disclosure vulnerability

An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory in Microsoft browsers, aka "Scripting Engine Information Disclosure Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge...

4.3CVSS5.7AI score0.06012EPSS
SaveExploits0References6Affected Software1
OSV
OSV
added 2022/05/13 1:48 a.m.42 views

GHSA-FV8M-P45W-GF38 ChakraCore RCE Vulnerability

Microsoft ChakraCore allows an attacker to bypass Control Flow Guard CFG in conjunction with another vulnerability to run arbitrary code on a target system, due to how the Chakra scripting engine handles accessing memory, aka "Scripting Engine Security Feature Bypass"...

7.5CVSS7.3AI score0.0423EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
added 2022/05/13 1:48 a.m.30 views

ChakraCore RCE Vulnerability

Microsoft ChakraCore allows an attacker to bypass Control Flow Guard CFG in conjunction with another vulnerability to run arbitrary code on a target system, due to how the Chakra scripting engine handles accessing memory, aka "Scripting Engine Security Feature Bypass"...

8.5CVSS6.9AI score0.0423EPSS
SaveExploits0References6Affected Software1
Github Security Blog
Github Security Blog
added 2022/05/13 1:42 a.m.28 views

ChakraCore vulnerable to privilege escalation

ChakraCore allows an attacker to gain the same user rights as the current user, due to the way that the ChakraCore scripting engine handles objects in memory. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take...

10CVSS8.6AI score0.08639EPSS
SaveExploits0References8Affected Software1
OSV
OSV
added 2022/05/13 1:42 a.m.55 views

GHSA-C79V-2RJQ-965M ChakraCore vulnerable to privilege escalation

ChakraCore allows an attacker to gain the same user rights as the current user, due to the way that the ChakraCore scripting engine handles objects in memory. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take...

9.8CVSS9.4AI score0.08639EPSS
SaveExploits0References8
OSV
OSV
added 2022/05/13 1:21 a.m.19 views

GHSA-6C6R-39CV-X5FQ Chakra JIT server Privilege Escalation

A vulnerability exists in Microsoft Chakra JIT server, aka 'Scripting Engine Elevation of Privileges Vulnerability'...

8.1CVSS8.6AI score0.0474EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
added 2022/05/13 1:21 a.m.23 views

Chakra JIT server Privilege Escalation

A vulnerability exists in Microsoft Chakra JIT server, aka 'Scripting Engine Elevation of Privileges Vulnerability'...

8.1CVSS6.8AI score0.0474EPSS
SaveExploits0References6Affected Software1
OSV
OSV
added 2022/05/13 1:21 a.m.38 views

GHSA-WWFW-M54G-GV72 ChakraCore information disclosure vulnerability

An information disclosure vulnerability exists when Chakra improperly discloses the contents of its memory, which could provide an attacker with information to further compromise the user's computer or data.To exploit the vulnerability, an attacker must know the memory address of where the object...

4.3CVSS4.8AI score0.06183EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
added 2022/05/13 1:21 a.m.41 views

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2019-0539, CVE-2019-0567...

7.6CVSS7AI score0.64656EPSS
SaveExploits4References6Affected Software1
OSV
OSV
added 2022/05/13 1:21 a.m.35 views

GHSA-2M5H-6G38-JJF2 ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2019-0539, CVE-2019-0567...

7.5CVSS7.5AI score0.64656EPSS
SaveExploits4References6
OSV
OSV
added 2022/05/13 1:21 a.m.31 views

GHSA-2XRC-27MC-638Q ChakraCore Remote code execution Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8583, CVE-2018-8617,...

7.5CVSS7.5AI score0.13219EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
added 2022/05/13 1:21 a.m.36 views

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8583, CVE-2018-8618,...

7.6CVSS7AI score0.53154EPSS
SaveExploits4References7Affected Software1
OSV
OSV
added 2022/05/13 1:20 a.m.21 views

GHSA-FW42-4MQ4-4QPQ ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore...

9.8CVSS9.4AI score0.17228EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
added 2022/05/13 1:20 a.m.29 views

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore...

10CVSS7.5AI score0.17228EPSS
SaveExploits0References6Affected Software1
Github Security Blog
Github Security Blog
added 2022/05/13 1:20 a.m.31 views

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8354, CVE-2018-8391, CVE-2018-8457,...

7.6CVSS7.3AI score0.14891EPSS
SaveExploits0References7Affected Software1
Rows per page
Query Builder