Out-of-Bounds

🗓️ 17 May 2022 02:35:00Reported by Snyk Security DatabaseType

Out-of-Bounds vulnerability in Microsoft.ChakraCore.vc140 enables code execution; upgrade to 1.4.4.

Reporter	Title	Published	Views	Family All 132
ATTACKERKB	CVE-2021-34448	16 Jul 202100:00	–	attackerkb
BDU FSTEC	The vulnerability in the JavaScript kernel of Microsoft Edge allows a hacker to trigger memory corruption.	8 Jun 201700:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the JavaScript kernel of Microsoft Edge’s browser allows a hacker to trigger memory corruption.	8 Jun 201700:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the JavaScript engine of Microsoft Edge and Internet Explorer allows a hacker to trigger memory corruption.	8 Jun 201700:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the JavaScript kernel of Microsoft Edge’s browser allows a hacker to trigger memory corruption.	8 Jun 201700:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the Chakra JavaScript engine of the Microsoft Edge browser allows a hacker to execute arbitrary code or trigger memory corruption.	8 Jun 201700:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the Chakra JavaScript engine of the Microsoft Edge browser allows a hacker to execute arbitrary code or trigger memory corruption.	8 Jun 201700:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the Chakra JavaScript engine of the Microsoft Edge browser allows a hacker to execute arbitrary code or trigger memory corruption.	8 Jun 201700:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the JavaScript script of Internet Explorer and Microsoft Edge browsers allows attackers to induce a service failure.	8 Jun 201700:00	–	bdu_fstec
CNVD	Microsoft Edge Remote Memory Corruption Vulnerability (CNVD-2017-06586)	11 May 201700:00	–	cnvd

Source	Link
cwe	www.cwe.mitre.org/data/definitions/CWE-119.html
security	www.security.snyk.io/vuln/SNYK-DOTNET-MICROSOFTCHAKRACOREVC140-5808463

11 Mar 2024 09:48Current

7.4High risk

Vulners AI Score7.4

CVSS 3.17.5

CVSS 37.5

CVSS 27.6

EPSS0.38115