Lucene search
+L
MicrosoftChakracore

255 matches found

CVE
CVE
added 2020/09/11 5:08 p.m.1174 views

CVE-2020-0878

CVE-2020-0878 is a memory corruption vulnerability in the way Microsoft Edge/Internet Explorer access objects in memory, enabling remote code execution in the context of the current user. Public description confirms a network-exploitable scenario via malicious websites or compromised sites, with ...

7.5CVSS7.8AI score0.02696EPSS
SaveIn wild
CVE
CVE
added 2018/07/11 12:00 a.m.1091 views

CVE-2018-8298

CVE-2018-8298 – ChakraCore RCE vulnerability exists in the ChakraCore scripting engine, arising from how memory objects are handled. A remote code execution flaw is described, affecting ChakraCore (and related Microsoft scripting environments per linked advisories). The issue is categorized as a ...

7.6CVSS6.8AI score0.75339EPSS
SaveIn wild
CVE
CVE
added 2020/02/11 9:23 p.m.327 views

CVE-2020-0713

Technical details for CVE-2020-0713 are not publicly available in the provided documents. Monitor for updates from official advisories; no affected products, vectors, or fixes are disclosed here.

7.6CVSS7.9AI score0.10124EPSS
SaveIn wild
CVE
CVE
added 2020/02/11 9:23 p.m.285 views

CVE-2020-0711

Technical details about CVE-2020-0711 are not publicly provided in the connected documents. The EUVD entries mention malware but do not specify affected product, root cause, impact, or remediation.

7.6CVSS7.9AI score0.10124EPSS
SaveIn wild
CVE
CVE
added 2019/11/12 6:53 p.m.284 views

CVE-2019-1426

Technical details for CVE-2019-1426 are not publicly provided in the connected documents. No specific affected product/version/root cause is reproduced here. Monitor for vendor advisories or additional disclosures to confirm impact and remediation.

7.6CVSS7.5AI score0.09374EPSS
SaveIn wild
CVE
CVE
added 2020/02/11 9:23 p.m.279 views

CVE-2020-0712

Technical details about CVE-2020-0712 are not publicly provided in the connected documents. The available sources describe unrelated EUVD entries (malicious code/malware notes). Monitor for updates from the listed references and authoritative security advisories.

7.6CVSS7.9AI score0.10124EPSS
SaveIn wild
CVE
CVE
added 2018/08/15 5:00 p.m.274 views

CVE-2018-8372

Microsoft Edge Chakra (ChakraCore) and Internet Explorer are affected by a remote code execution vulnerability in the scripting engine due to memory-object handling issues. The CVE-2018-8372 family (and related CVEs) describes a memory-corruption flaw that enables code execution via crafted objec...

7.6CVSS6.8AI score0.23751EPSS
SaveIn wild
CVE
CVE
added 2020/02/11 9:23 p.m.273 views

CVE-2020-0710

CVE-2020-0710 describes a remote code execution in the ChakraCore scripting engine related to how it handles objects in memory. The CVE entry cites a high impact (CVSS v3.1 base score 7.5) with network access required and user interaction needed. Affected component: ChakraCore memory object handl...

7.6CVSS7.9AI score0.10124EPSS
SaveIn wild
CVE
CVE
added 2018/08/15 5:00 p.m.266 views

CVE-2018-8390

CVE-2018-8390 is a remote code execution vulnerability in the ChakraCore scripting engine's in-memory object handling, affecting Microsoft Edge and ChakraCore. The root cause is memory corruption in the scripting engine, enabling potential code execution with network access and user interaction r...

7.6CVSS6.8AI score0.14773EPSS
SaveIn wild
CVE
CVE
added 2020/02/11 9:23 p.m.264 views

CVE-2020-0767

Technical details for CVE-2020-0767 are not publicly available in the provided connected documents. Monitor for updates.

7.6CVSS7.9AI score0.17597EPSS
SaveIn wild
CVE
CVE
added 2018/08/15 5:00 p.m.253 views

CVE-2018-8385

CVE-2018-8385 describes a remote code execution vulnerability in how the Microsoft scripting engine handles objects in memory, leading to memory corruption. Affected products listed in the description include Internet Explorer 9, ChakraCore, Internet Explorer 11, Microsoft Edge, and Internet Expl...

7.6CVSS6.8AI score0.14576EPSS
SaveIn wild
CVE
CVE
added 2018/08/15 5:00 p.m.251 views

CVE-2018-8355

CVE-2018-8355 is a remote code execution vulnerability in Microsoft’s scripting stack (ChakraCore, Internet Explorer 11, Edge) due to memory handling flaws in the scripting engine. Public details in connected sources point to an object/memory handling vulnerability exploited via type-confusion in...

7.6CVSS6.8AI score0.62501EPSS
SaveIn wild
CVE
CVE
added 2020/04/15 3:13 p.m.246 views

CVE-2020-0970

CVE-2020-0970 describes a remote code execution vulnerability in the ChakraCore scripting engine, arising from how the engine handles in-memory objects. It is associated with ChakraCore used by Microsoft Edge/Internet Explorer, and is explicitly distinguished from CVE-2020-0968. The connected doc...

7.6CVSS8AI score0.13303EPSS
SaveIn wild
CVE
CVE
added 2018/07/11 12:00 a.m.238 views

CVE-2018-8288

CVE-2018-8288 is a remote code execution vulnerability in ChakraCore, Internet Explorer 11, and Microsoft Edge caused by memory handling of objects in the scripting engine (memory corruption). The CVE notes high impact with network access and required user interaction. Public references in the co...

7.6CVSS6.7AI score0.63244EPSS
SaveIn wild
CVE
CVE
added 2019/11/12 6:53 p.m.237 views

CVE-2019-1428

Technical details for CVE-2019-1428 are not publicly provided in the connected documents. The available materials confirm Edge memory corruption in HTML-based scripting engine but do not specify affected versions, exploit vectors, or fixes. Monitor for vendor advisories.

7.6CVSS7.5AI score0.09374EPSS
SaveIn wild
CVE
CVE
added 2019/04/09 8:15 p.m.236 views

CVE-2019-0739

Technical details for CVE-2019-0739 are not available in the provided connected documents. The sources only offer a high-level description of an Edge scripting engine memory corruption without specifying affected components, versions, impact, or fixes.

7.6CVSS7.6AI score0.11298EPSS
SaveIn wild
CVE
CVE
added 2018/07/11 12:00 a.m.231 views

CVE-2018-8291

The CVE-2018-8291 entry describes a remote code execution in the ChakraCore scripting engine affecting ChakraCore, Internet Explorer 11, and Microsoft Edge due to memory handling in scripting objects. Root cause: memory object handling in the scripting engine leading to RCE. Public references sho...

7.6CVSS6.7AI score0.63244EPSS
SaveIn wild
CVE
CVE
added 2018/08/15 5:00 p.m.231 views

CVE-2018-8359

Technical details for CVE-2018-8359 are not publicly available in the provided connected documents. Monitor for updates.

7.6CVSS6.8AI score0.14636EPSS
SaveIn wild
CVE
CVE
added 2019/11/12 6:53 p.m.226 views

CVE-2019-1427

Technical details for CVE-2019-1427 are not publicly provided in the connected documents. We cannot specify affected products, root cause, impact, or fixes from these sources. Monitor official advisories and vendor disclosures for updates.

7.6CVSS7.5AI score0.09374EPSS
SaveIn wild
CVE
CVE
added 2018/07/11 12:00 a.m.221 views

CVE-2018-8287

CVE-2018-8287 describes a remote code execution vulnerability in the ChakraCore scripting engine and affected Microsoft browsers (Internet Explorer 11, Edge) due to memory handling. The connected advisories (GHSA) mirror the description and identify ChakraCore as the affected component; no specif...

7.6CVSS6.7AI score0.16709EPSS
SaveIn wild
CVE
CVE
added 2018/07/11 12:00 a.m.214 views

CVE-2018-8283

CVE-2018-8283 describes a remote code execution in the ChakraCore scripting engine due to memory handling of objects. The connected advisories (GHSA entries) confirm impact on ChakraCore and Microsoft browsers (IE11, Edge). No specific affected versions, root-cause details, or remediation/patch v...

7.6CVSS6.8AI score0.13797EPSS
SaveIn wild
CVE
CVE
added 2020/03/12 3:48 p.m.204 views

CVE-2020-0827

Technical details about CVE-2020-0827 are not publicly provided in the supplied documents. The connected EUVD records mention malware in 'sbrugna' but do not describe affected products, root cause, or mitigation. Monitor for updates.

7.6CVSS7.8AI score0.13303EPSS
Save
CVE
CVE
added 2019/01/08 9:00 p.m.180 views

CVE-2019-0539

CVE-2019-0539 is an in-memory memory-corruption vulnerability in Microsoft Edge/ChakraCore where the Chakra JIT/type-confusion paths expose remote code execution. Public references describe exploitation through Type Confusion in Chakra Core/Edge, with exploit examples showing read/write primitive...

7.6CVSS7.4AI score0.75549EPSS
Save
CVE
CVE
added 2019/09/11 9:24 p.m.175 views

CVE-2019-1237

Technical details for CVE-2019-1237 are not publicly available in the provided connected documents. No concrete affected products, versions, root cause, or mitigations are present here. Monitor for updates from authoritative sources to obtain specifics and remediation guidance.

7.6CVSS7.4AI score0.08673EPSS
Save
CVE
CVE
added 2020/03/12 3:48 p.m.174 views

CVE-2020-0768

Technical details for CVE-2020-0768 are not provided in the connected documents. Public details appear limited to initial description. Monitor for updates from official sources.

7.6CVSS7.7AI score0.08733EPSS
Save
CVE
CVE
added 2020/03/12 3:48 p.m.172 views

CVE-2020-0823

Technical details on CVE-2020-0823 are not provided in the supplied documents; no specifics on affected products, root cause, impact, or fixes are disclosed. Monitor for updates.

7.6CVSS7.8AI score0.08854EPSS
Save
CVE
CVE
added 2020/09/11 5:09 p.m.171 views

CVE-2020-1172

CVE-2020-1172 describes a remote code execution in the ChakraCore scripting engine caused by memory corruption when handling objects in memory. The issue could let an attacker execute code with the current user’s privileges (high impact if the user has admin rights). The vulnerability is addresse...

7.6CVSS6.7AI score0.02125EPSS
Save
CVE
CVE
added 2020/09/11 5:08 p.m.168 views

CVE-2020-1057

Technical details for CVE-2020-1057 are not publicly available in the provided connected documents. We cannot identify affected products/versions or remediation from these sources. Monitor official Microsoft/MSRC advisories and related CVE references for concrete information.

9.3CVSS6.7AI score0.02062EPSS
Save
CVE
CVE
added 2019/07/29 2:08 p.m.163 views

CVE-2019-1107

CVE-2019-1107 concerns a remote code execution in Microsoft Edge via the Chakra scripting engine’s in-memory handling. The connected docs (GitHub advisories GHSA entries) reference an Out-of-bounds write/memory corruption in Chakra as the underlying issue and identify Edge/chakra as affected, ali...

7.6CVSS7.4AI score0.09794EPSS
Save
CVE
CVE
added 2019/09/11 9:24 p.m.162 views

CVE-2019-1217

Technical details for CVE-2019-1217 are not publicly available in the provided connected documents; no affected products, versions, or remediation are described here. Monitor for updates.

7.6CVSS7.4AI score0.08673EPSS
Save
CVE
CVE
added 2019/04/08 10:22 p.m.158 views

CVE-2019-0592

CVE-2019-0592 is a ChakraCore/Edge memory-corruption remote code execution issue. Connected sources corroborate a Chakra memory-management flaw that can lead to RCE in Microsoft Edge when handling in-memory objects. No exploit specifics are provided in the documents. Remediation details are not e...

7.6CVSS7.4AI score0.22661EPSS
Save
CVE
CVE
added 2020/03/12 3:48 p.m.157 views

CVE-2020-0829

Technical details about CVE-2020-0829 are not publicly available in the provided documents. Monitor for updates from trusted sources to assess impact, affected products, and fixes.

7.6CVSS7.8AI score0.08854EPSS
Save
CVE
CVE
added 2020/11/11 6:48 a.m.156 views

CVE-2020-17048

Technical details for CVE-2020-17048 are not publicly provided in the supplied connected documents. No specific affected products, root cause, impact, or remediation are confirmed here. Monitor for updates from NVD/MSRC/GHSA as they become available.

8.1CVSS5AI score0.01647EPSS
Save
CVE
CVE
added 2019/05/16 6:17 p.m.155 views

CVE-2019-0912

Technical details about CVE-2019-0912 are not publicly available in the provided documents; no product, impact, or remediation specifics are disclosed. Monitor for updates from official advisories.

7.6CVSS7.5AI score0.09679EPSS
Save
CVE
CVE
added 2019/10/10 1:28 p.m.155 views

CVE-2019-1335

Technical details for CVE-2019-1335 are not publicly available in the provided documents. Monitor for updates and potential advisory disclosures.

7.6CVSS7.4AI score0.1017EPSS
Save
CVE
CVE
added 2020/08/17 7:13 p.m.155 views

CVE-2020-1555

CVE-2020-1555 is a memory corruption vulnerability in the Edge HTML-based scripting engine. The vulnerability allows an attacker to execute arbitrary code in the context of the current user, with the potential for full system compromise if the user has admin rights. The issue stems from how the E...

9.3CVSS9.1AI score0.0451EPSS
Save
CVE
CVE
added 2019/01/08 9:00 p.m.152 views

CVE-2019-0567

CVE-2019-0567 is a remote code execution in the Chakra scripting engine used by Microsoft Edge and ChakraCore, stemming from memory handling issues in Chakra. Public exploits are referenced in Exploit-DB (e.g., 46203) and are part of a trio of Edge Chakra memory‑corruption advisories (CVE-2019-05...

7.6CVSS7.4AI score0.75411EPSS
Save
CVE
CVE
added 2020/11/11 6:48 a.m.151 views

CVE-2020-17054

Technical details for CVE-2020-17054 are not publicly provided in the connected documents. Monitor official advisories for updates; no affected product/version or remediation is disclosed here.

7.6CVSS4.4AI score0.02067EPSS
Save
CVE
CVE
added 2020/12/09 11:36 p.m.151 views

CVE-2020-17131

CVE-2020-17131 concerns a memory corruption vulnerability in the Chakra Scripting Engine described in the connected advisories as an out-of-bounds write in Chakra . The linked sources identify the issue as part of Chakra’s scripting engine and associate it with the same CVE across multiple feeds,...

7.5CVSS4.5AI score0.01753EPSS
Save
CVE
CVE
added 2020/03/12 3:48 p.m.142 views

CVE-2020-0828

Technical details for CVE-2020-0828 are not publicly available in the provided connected documents; no affected products, root cause, impact, or remediation are specified here. Monitor for updates.

7.6CVSS7.8AI score0.08854EPSS
Save
CVE
CVE
added 2020/03/12 3:48 p.m.140 views

CVE-2020-0830

Technical details about CVE-2020-0830 are not provided in the connected documents. Public information for this CVE is not present here. Monitor for updates from official advisories and trusted sources.

7.6CVSS7.7AI score0.08733EPSS
Save
CVE
CVE
added 2020/03/12 3:48 p.m.140 views

CVE-2020-0848

CVE-2020-0848 is a remote code execution vulnerability in the ChakraCore scripting engine caused by how it handles objects in memory (Scripting Engine Memory Corruption Vulnerability). Based on the provided data, this affects ChakraCore’s memory handling paths that process objects, leading to hig...

7.6CVSS7.8AI score0.09592EPSS
Save
CVE
CVE
added 2020/03/12 3:48 p.m.139 views

CVE-2020-0826

Technical details about CVE-2020-0826 are not publicly available in the provided connected documents. No affected products, root cause, or remediation are specified here. Monitor for updates from official advisories and trusted vulnerability feeds.

7.6CVSS7.8AI score0.08854EPSS
Save
CVE
CVE
added 2018/12/12 12:00 a.m.138 views

CVE-2018-8617

CVE-2018-8617 affects Microsoft Edge and ChakraCore, with a remote code execution vector tied to the Chakra scripting engine’s handling of in‑memory objects. The public description states the root cause as memory corruption within Chakra, leading to high-severity impact (CVE base score 7.5/7.6) a...

7.6CVSS6.8AI score0.53154EPSS
Save
CVE
CVE
added 2019/06/12 1:49 p.m.138 views

CVE-2019-1052

CVE-2019-1052 is a remote code execution vulnerability in Microsoft Edge's Chakra scripting engine. It arises from memory corruption when handling objects, potentially allowing code execution with the caller's privileges via a crafted web page. The issue affects Edge HTML-based scenarios and is m...

7.6CVSS6.6AI score0.0217EPSS
Save
CVE
CVE
added 2019/10/10 1:28 p.m.138 views

CVE-2019-1308

CVE-2019-1308: A remote code execution issue in Microsoft Edge's Chakra engine arises from memory handling of objects. Connected advisories (GHSA/GHSA entries) describe an RCE in the Chakra scripting engine memory corruption vulnerability, noting it is distinct from CVE-2019-1307/1335/1366. The v...

7.6CVSS7.4AI score0.10377EPSS
Save
CVE
CVE
added 2020/03/12 3:48 p.m.138 views

CVE-2020-0825

Technical details about CVE-2020-0825 are not provided in the supplied documents. Monitoring for updates is advised.

7.6CVSS7.8AI score0.13303EPSS
Save
CVE
CVE
added 2020/09/11 5:09 p.m.138 views

CVE-2020-1180

Technical details about CVE-2020-1180 (affected ChakraCore components, root cause, impact or fixes) are not publicly provided in the supplied documents. Monitor for updates from official sources to obtain concrete technical information.

7.6CVSS7.2AI score0.02067EPSS
Save
CVE
CVE
added 2019/07/15 6:56 p.m.137 views

CVE-2019-1092

Technical details about CVE-2019-1092 are not publicly available in the provided connected documents. Monitor for updates from official advisories and sources for concrete affected products, versions, impact, and fixes.

7.6CVSS7.4AI score0.09398EPSS
Save
CVE
CVE
added 2019/09/11 9:24 p.m.136 views

CVE-2019-1138

Technical details for CVE-2019-1138 are not publicly provided in the connected documents. Based on the materials, no concrete affected products, versions, exploit vectors, or remediation are disclosed. Monitor for updates from official advisories.

7.6CVSS7.4AI score0.08673EPSS
Save
Total number of security vulnerabilities255