CVE-2020-0848: Out-of-bounds Write

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0768, CVE-2020-0823, CVE-2020-0825, CVE-2020-0826, CVE-2020-0827, CVE-2020-0828,...

CVE-2020-0830: Out-of-bounds Write

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0768, CVE-2020-0823, CVE-2020-0825, CVE-2020-0826, CVE-2020-0827, CVE-2020-0828...

CVE-2020-0827: Out-of-bounds Write

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0768, CVE-2020-0823, CVE-2020-0825, CVE-2020-0826, CVE-2020-0828, CVE-2020-0829,...

CVE-2020-0826: Out-of-bounds Write

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0768, CVE-2020-0823, CVE-2020-0825, CVE-2020-0827, CVE-2020-0828, CVE-2020-0829,...

Microsoft Issues March 2020 Updates to Patch 115 Security Flaws

Microsoft today released security updates to fix a total of 115 new security vulnerabilities in various versions of its Windows operating system and related software—making March 2020 edition the biggest ever Patch Tuesday in the company's history. Of the 115 bugs spanning its various products —...

Microsoft Internet Explorer Scripting Engine Remote Code Execution Vulnerability (CNVD-2020-19968)

Microsoft Internet Explorer IE is a Web browser that comes with the Windows operating system from the American company Microsoft. A remote code execution vulnerability exists in the way the scripting engine handles memory objects in Microsoft IE 11. An attacker could exploit this vulnerability to...

Microsoft Internet Explorer Scripting Engine Remote Code Execution Vulnerability (CNVD-2020-19962)

Microsoft Internet Explorer IE is a Web browser that comes with the Windows operating system from the American company Microsoft. A remote code execution vulnerability exists in the way the scripting engine handles memory objects in Microsoft IE 11. An attacker could exploit this vulnerability to...

March 10, 2020—KB4541510 (Monthly Rollup)

March 10, 2020—KB4541510 Monthly Rollup Applies To Windows Server 2012 Windows Embedded 8 Standard Note NEW As of February 11, 2020, Internet Explorer 10 is no longer in support. To get Internet Explorer 11 for Windows Server 2012 or Windows 8 Embedded Standard, see KB4492872. Install one of the...

VBScript Remote Code Execution Vulnerability

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerabili...

March 10, 2020—KB4538461 (OS Build 17763.1098)

March 10, 2020—KB4538461 OS Build 17763.1098 Applies To Windows 10, version 1809, all editions Windows Server version 1809 Windows Server 2019, all editions Note Note This release also contains updates for Microsoft HoloLens OS Build 17763.1098 released March 10, 2020. Microsoft will release an...

March 10, 2020—KB4540689 (OS Build 17134.1365)

March 10, 2020—KB4540689 OS Build 17134.1365 Applies To Windows 10, version 1803, all editions Note Windows 10, version 1803 the April 2018 Update Home and Pro editions have reached end of service. For Windows 10 devices that are at, or within several months of reaching end of service, Windows...

Chakra Scripting Engine Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge HTML-based. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who...

Chakra Scripting Engine Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge HTML-based. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who...

PT-2020-1918

Name of the Vulnerable Software and Affected Versions Microsoft Edge HTML-based affected versions not specified Description A remote code execution issue exists due to the way the Chakra scripting engine handles objects in memory. This could allow an attacker to execute arbitrary code in the...

PT-2020-1919

Name of the Vulnerable Software and Affected Versions Microsoft Edge HTML-based affected versions not specified Description A remote code execution issue exists due to the way the Chakra scripting engine handles objects in memory. This could allow an attacker to execute arbitrary code in the...

PT-2020-1773

Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description The issue is related to a remote code execution vulnerability in the ChakraCore scripting engine, which handles objects in memory. This vulnerability could allow an attacker to corrupt...

KLA11681 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A memory corruption vulnerability in Scripting Engine can be exploited remotely to...

PT-2020-1775

Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Internet Explorer affected versions not specified Description The issue is related to a remote code execution vulnerability in the way the scripting engine handles objects in memory in Microsoft...

PT-2020-1821

Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description The issue is related to a remote code execution problem in the ChakraCore scripting engine, caused by a buffer overflow in memory. This could allow an attacker to execute arbitrary cod...

PT-2020-1742

Name of the Vulnerable Software and Affected Versions Internet Explorer affected versions not specified Description The issue is related to a remote code execution vulnerability in the way the scripting engine handles objects in memory. This could allow an attacker to execute arbitrary code with...