Search for packages
| purl | pkg:nuget/Microsoft.ChakraCore@1.4.5 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 10.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-18bt-p9bu-7kcg
Aliases: CVE-2019-0937 GHSA-8gvg-8vhf-h26g |
Out-of-bounds Write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0912, CVE-2019-0913, CVE-2019-0914, CVE-2019-0915, CVE-2019-0916, CVE-2019-0917, CVE-2019-0922, CVE-2019-0923, CVE-2019-0924, CVE-2019-0925, CVE-2019-0927, CVE-2019-0933. |
Affected by 67 other vulnerabilities. |
|
VCID-18cy-ef2d-sfgs
Aliases: CVE-2017-11930 |
Improper Restriction of Operations within the Bounds of a Memory Buffer ChakraCore, and Internet Explorer in Microsoft Windows 7 SP1, Windows Server R2 SP1, Windows and Windows RT, Windows Server R2, Windows Gold, and Windows Server allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11886, CVE-2017-11889, CVE-2017-11890, CVE-2017-11893, CVE-2017-11894, CVE-2017-11895, CVE-2017-11901, CVE-2017-11903, CVE-2017-11905, CVE-2017-11905, CVE-2017-11907, CVE-2017-11908, CVE-2017-11909, CVE-2017-11910, CVE-2017-11911, CVE-2017-11912, CVE-2017-11913, CVE-2017-11914, and CVE-2017-11916. |
Affected by 172 other vulnerabilities. |
|
VCID-193r-rk9b-73a7
Aliases: CVE-2018-0773 |
Out-of-bounds Write Microsoft Edge in Windows allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0758, CVE-2018-0762, CVE-2018-0768, CVE-2018-0769, CVE-2018-0770, CVE-2018-0772, CVE-2018-0774, CVE-2018-0775, CVE-2018-0776, CVE-2018-0777, CVE-2018-0778, and CVE-2018-0781. |
Affected by 156 other vulnerabilities. |
|
VCID-19s3-6hk5-zydp
Aliases: CVE-2017-8658 GHSA-8v2h-4jpm-3wfm |
Improper Restriction of Operations within the Bounds of a Memory Buffer A remote code execution vulnerability exists in the way that the Chakra JavaScript engine renders when handling objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". |
Affected by 0 other vulnerabilities. Affected by 192 other vulnerabilities. |
|
VCID-1d4d-6ycn-kfbg
Aliases: CVE-2019-1217 GHSA-pcgf-qjx2-qv4q |
Affected by 38 other vulnerabilities. |
|
|
VCID-1fvy-afaq-7ffz
Aliases: CVE-2018-8291 GHSA-j67m-wpv6-pv44 |
Access of Resource Using Incompatible Type ('Type Confusion') A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore, Internet Explorer, Microsoft Edge. This CVE ID is unique from CVE-2018-8242, CVE-2018-8283, CVE-2018-8287, CVE-2018-8288, CVE-2018-8296, CVE-2018-8298. |
Affected by 109 other vulnerabilities. |
|
VCID-1hm4-8j3z-gbe8
Aliases: CVE-2019-0590 |
Out-of-bounds Write A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0591, CVE-2019-0593, CVE-2019-0605, CVE-2019-0607, CVE-2019-0610, CVE-2019-0640, CVE-2019-0642, CVE-2019-0644, CVE-2019-0651, CVE-2019-0652, CVE-2019-0655. |
Affected by 95 other vulnerabilities. |
|
VCID-1mqn-qxsq-gfb5
Aliases: CVE-2018-0768 |
Out-of-bounds Write Microsoft Edge in Windows allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0758, CVE-2018-0762, CVE-2018-0769, CVE-2018-0770, CVE-2018-0772, CVE-2018-0773, CVE-2018-0774, CVE-2018-0775, CVE-2018-0776, CVE-2018-0777, CVE-2018-0778, and CVE-2018-0781. |
Affected by 156 other vulnerabilities. |
|
VCID-1txb-sjay-ukfb
Aliases: CVE-2018-0953 |
Out-of-bounds Write A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-0945, CVE-2018-0946, CVE-2018-0951, CVE-2018-0954, CVE-2018-0955, CVE-2018-1022, CVE-2018-8114, CVE-2018-8122, CVE-2018-8128, CVE-2018-8137, CVE-2018-8139. |
Affected by 125 other vulnerabilities. |
|
VCID-1xh6-cjvx-4bej
Aliases: CVE-2017-11909 GHSA-9qpf-v72j-j9qh |
Improper Restriction of Operations within the Bounds of a Memory Buffer ChakraCore and Windows, and Windows Server allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11886, CVE-2017-11889, CVE-2017-11890, CVE-2017-11893, CVE-2017-11894, CVE-2017-11895, CVE-2017-11901, CVE-2017-11903, CVE-2017-11905, CVE-2017-11905, CVE-2017-11907, CVE-2017-11908, CVE-2017-11910, CVE-2017-11911, CVE-2017-11912, CVE-2017-11913, CVE-2017-11914, CVE-2017-11916, CVE-2017-11918, and CVE-2017-11930. |
Affected by 172 other vulnerabilities. |
|
VCID-1xjh-99vu-vyf6
Aliases: CVE-2019-0640 |
Out-of-bounds Write A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0590, CVE-2019-0591, CVE-2019-0593, CVE-2019-0605, CVE-2019-0607, CVE-2019-0610, CVE-2019-0642, CVE-2019-0644, CVE-2019-0651, CVE-2019-0652, CVE-2019-0655. |
Affected by 95 other vulnerabilities. |
|
VCID-27q5-85wq-ayhx
Aliases: CVE-2019-1138 GHSA-pwpr-vp2v-99xw |
Affected by 38 other vulnerabilities. |
|
|
VCID-2jw8-vq79-3yc4
Aliases: CVE-2019-0609 GHSA-pjpj-f6r8-56rm |
Out-of-bounds Write A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0639, CVE-2019-0680, CVE-2019-0769, CVE-2019-0770, CVE-2019-0771, CVE-2019-0773, CVE-2019-0783. |
Affected by 88 other vulnerabilities. |
|
VCID-2ry8-tv1k-pyb3
Aliases: CVE-2018-8177 GHSA-7cc5-cqmx-9v7g |
Out-of-bounds Write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore. This CVE ID is unique from CVE-2018-0943, CVE-2018-8130, CVE-2018-8133, CVE-2018-8145. |
Affected by 125 other vulnerabilities. Affected by 123 other vulnerabilities. |
|
VCID-2wu3-ksgd-7qcr
Aliases: CVE-2019-0992 GHSA-53r4-h27g-rg3x |
Affected by 56 other vulnerabilities. |
|
|
VCID-2x6n-tg25-wkc4
Aliases: CVE-2017-11908 GHSA-923j-972p-hchf |
Improper Restriction of Operations within the Bounds of a Memory Buffer ChakraCore and Windows allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11886, CVE-2017-11889, CVE-2017-11890, CVE-2017-11893, CVE-2017-11894, CVE-2017-11895, CVE-2017-11901, CVE-2017-11903, CVE-2017-11905, CVE-2017-11905, CVE-2017-11907, CVE-2017-11909, CVE-2017-11910, CVE-2017-11911, CVE-2017-11912, CVE-2017-11913, CVE-2017-11914, CVE-2017-11916, CVE-2017-11918, and CVE-2017-11930. |
Affected by 172 other vulnerabilities. |
|
VCID-34vx-bf9f-hugc
Aliases: CVE-2018-8276 GHSA-wg47-6cqc-q52j |
ChakraCore Security Bypass A security feature bypass vulnerability exists in the Microsoft Chakra scripting engine that allows Control Flow Guard (CFG) to be bypassed, aka "Scripting Engine Security Feature Bypass Vulnerability." This affects Microsoft Edge, ChakraCore. |
Affected by 109 other vulnerabilities. |
|
VCID-3nzr-td1q-y3em
Aliases: CVE-2019-1139 GHSA-9qw8-ccq9-ffj9 |
Affected by 43 other vulnerabilities. |
|
|
VCID-3r3s-nrc8-sbe6
Aliases: CVE-2018-8227 GHSA-gqh4-4r89-pr95 |
Out-of-bounds Write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8229. |
Affected by 123 other vulnerabilities. Affected by 123 other vulnerabilities. |
|
VCID-431z-8875-d7fr
Aliases: CVE-2020-0711 GHSA-63fw-7jgf-5hwv |
Affected by 28 other vulnerabilities. |
|
|
VCID-46f5-3qcs-ckcw
Aliases: CVE-2019-0611 GHSA-7ph8-f946-q5r7 |
Out-of-bounds Write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0592. |
Affected by 88 other vulnerabilities. |
|
VCID-4jw5-n3pz-zuhf
Aliases: CVE-2017-11797 GHSA-hrf4-ww4w-6rv6 |
Exposure of Sensitive Information to an Unauthorized Actor ChakraCore allows an attacker to execute arbitrary code in the context of the current user, due to how the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-11792, CVE-2017-11793, CVE-2017-11796, CVE-2017-11798, CVE-2017-11799, CVE-2017-11800, CVE-2017-11801, CVE-2017-11802, CVE-2017-11804, CVE-2017-11805, CVE-2017-11806, CVE-2017-11807, CVE-2017-11808, CVE-2017-11809, CVE-2017-11810, CVE-2017-11811, CVE-2017-11812, and CVE-2017-11821. |
Affected by 185 other vulnerabilities. |
|
VCID-4kr2-wf77-nug4
Aliases: CVE-2019-0810 GHSA-2mmc-5phj-4wjj |
Out-of-bounds Write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0806, CVE-2019-0812, CVE-2019-0829, CVE-2019-0860, CVE-2019-0861. |
Affected by 81 other vulnerabilities. |
|
VCID-4n9b-ptn2-3ugd
Aliases: CVE-2019-0911 GHSA-9735-p6r2-2hgh |
Out-of-bounds Write A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0884, CVE-2019-0918. |
Affected by 67 other vulnerabilities. |
|
VCID-4rr8-ter6-7yaw
Aliases: CVE-2019-0927 GHSA-37pf-w9ff-gqvm |
Out-of-bounds Write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0912, CVE-2019-0913, CVE-2019-0914, CVE-2019-0915, CVE-2019-0916, CVE-2019-0917, CVE-2019-0922, CVE-2019-0923, CVE-2019-0924, CVE-2019-0925, CVE-2019-0933, CVE-2019-0937. |
Affected by 67 other vulnerabilities. |
|
VCID-4rwm-5rju-qfex
Aliases: CVE-2019-1131 GHSA-mw7r-3g6w-85qg |
Affected by 43 other vulnerabilities. |
|
|
VCID-523x-9n5w-rqc2
Aliases: CVE-2018-8294 GHSA-gxxx-j8m7-hh7m |
Out-of-bounds Write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8280, CVE-2018-8286, CVE-2018-8290. |
Affected by 117 other vulnerabilities. Affected by 109 other vulnerabilities. |
|
VCID-532u-w1p6-rycx
Aliases: CVE-2018-0767 |
Out-of-bounds Read Microsoft Edge in Microsoft Windows, and Windows Server allows an attacker to obtain information to further compromise the user's system, due to how the scripting engine handles objects in memory, aka "Scripting Engine Information Disclosure Vulnerability". This CVE ID is unique from CVE-2018-0780 and CVE-2018-0800. |
Affected by 156 other vulnerabilities. |
|
VCID-54dn-25dk-c7fv
Aliases: CVE-2019-1002 GHSA-4v6q-gjm6-6vv4 |
Affected by 56 other vulnerabilities. |
|
|
VCID-54xz-xw4u-xqh9
Aliases: CVE-2018-0954 GHSA-h5hw-qrrw-vfxg |
Out-of-bounds Write A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability." This affects Internet Explorer 9, ChakraCore, Internet Explorer, Microsoft Edge, Internet Explorer This CVE ID is unique from CVE-2018-0945, CVE-2018-0946, CVE-2018-0951, CVE-2018-0953, CVE-2018-0955, CVE-2018-1022, CVE-2018-8114, CVE-2018-8122, CVE-2018-8128, CVE-2018-8137, CVE-2018-8139. |
Affected by 125 other vulnerabilities. Affected by 123 other vulnerabilities. |
|
VCID-558y-9j3b-fyd3
Aliases: CVE-2019-0861 GHSA-qxmj-3c5h-546c |
Out-of-bounds Write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0806, CVE-2019-0810, CVE-2019-0812, CVE-2019-0829, CVE-2019-0860. |
Affected by 81 other vulnerabilities. |
|
VCID-5s8e-w8mp-xydh
Aliases: CVE-2017-11893 GHSA-c6r3-ghjw-hgrj |
Improper Restriction of Operations within the Bounds of a Memory Buffer ChakraCore and Microsoft Edge in Windows, and Windows Server allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11886, CVE-2017-11889, CVE-2017-11890, CVE-2017-11894, CVE-2017-11895, CVE-2017-11901, CVE-2017-11903, CVE-2017-11905, CVE-2017-11907, CVE-2017-11908, CVE-2017-11909, CVE-2017-11910, CVE-2017-11911, CVE-2017-11912, CVE-2017-11913, CVE-2017-11914, CVE-2017-11916, CVE-2017-11918, and CVE-2017-11930. |
Affected by 172 other vulnerabilities. |
|
VCID-5vs4-kke1-2qc1
Aliases: CVE-2019-0923 GHSA-h23m-w6x5-jwr4 |
Affected by 67 other vulnerabilities. |
|
|
VCID-63zg-je8v-2yh6
Aliases: CVE-2018-0781 |
Out-of-bounds Write Microsoft Edge in Windows Gold, and Windows Server allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0758, CVE-2018-0762, CVE-2018-0768, CVE-2018-0769, CVE-2018-0770, CVE-2018-0772, CVE-2018-0773, CVE-2018-0774, CVE-2018-0775, CVE-2018-0776, CVE-2018-0777, and CVE-2018-0778. |
Affected by 156 other vulnerabilities. |
|
VCID-66rk-gaz2-x7et
Aliases: CVE-2019-0913 GHSA-59cj-99cw-rq64 |
Out-of-bounds Write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0912, CVE-2019-0914, CVE-2019-0915, CVE-2019-0916, CVE-2019-0917, CVE-2019-0922, CVE-2019-0923, CVE-2019-0924, CVE-2019-0925, CVE-2019-0927, CVE-2019-0933, CVE-2019-0937. |
Affected by 67 other vulnerabilities. |
|
VCID-6yew-52pk-nfe9
Aliases: CVE-2019-0607 |
Out-of-bounds Write A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0590, CVE-2019-0591, CVE-2019-0593, CVE-2019-0605, CVE-2019-0610, CVE-2019-0640, CVE-2019-0642, CVE-2019-0644, CVE-2019-0651, CVE-2019-0652, CVE-2019-0655. |
Affected by 95 other vulnerabilities. |
|
VCID-6zfw-kag6-sfhq
Aliases: CVE-2019-0860 GHSA-fv87-p7qr-xh5x |
Out-of-bounds Write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0806, CVE-2019-0810, CVE-2019-0812, CVE-2019-0829, CVE-2019-0861. |
Affected by 81 other vulnerabilities. |
|
VCID-7sqx-g2jn-9yds
Aliases: CVE-2019-0829 GHSA-5rq3-9wc9-m9c3 |
Out-of-bounds Write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0806, CVE-2019-0810, CVE-2019-0812, CVE-2019-0860, CVE-2019-0861. |
Affected by 81 other vulnerabilities. |
|
VCID-7trr-1jwb-zufw
Aliases: CVE-2019-0658 |
Privilege Escalation An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory in Microsoft Edge, aka 'Scripting Engine Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0648. |
Affected by 95 other vulnerabilities. |
|
VCID-7xtq-66dy-bkgk
Aliases: CVE-2019-1197 GHSA-v89p-5hr2-4rh4 |
Affected by 43 other vulnerabilities. |
|
|
VCID-7z5t-cth2-ybe1
Aliases: CVE-2018-8286 GHSA-vwqh-cmvp-6694 |
Out-of-bounds Write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8280, CVE-2018-8290, CVE-2018-8294. |
Affected by 117 other vulnerabilities. Affected by 109 other vulnerabilities. |
|
VCID-8jd7-9g2p-xqec
Aliases: CVE-2019-0651 |
Out-of-bounds Write A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0590, CVE-2019-0591, CVE-2019-0593, CVE-2019-0605, CVE-2019-0607, CVE-2019-0610, CVE-2019-0640, CVE-2019-0642, CVE-2019-0644, CVE-2019-0652, CVE-2019-0655. |
Affected by 95 other vulnerabilities. |
|
VCID-8jqz-9eaj-mfaj
Aliases: CVE-2018-8290 GHSA-vgxq-xv7f-jxjx |
Out-of-bounds Write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8280, CVE-2018-8286, CVE-2018-8294. |
Affected by 117 other vulnerabilities. Affected by 109 other vulnerabilities. |
|
VCID-8raz-bd3b-mfhh
Aliases: CVE-2020-0811 GHSA-pg99-mp4c-75g6 |
Affected by 13 other vulnerabilities. |
|
|
VCID-8swk-fket-wkes
Aliases: CVE-2018-0778 |
Out-of-bounds Write Microsoft Edge in Windows allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0758, CVE-2018-0762, CVE-2018-0768, CVE-2018-0769, CVE-2018-0770, CVE-2018-0772, CVE-2018-0773, CVE-2018-0774, CVE-2018-0775, CVE-2018-0776, CVE-2018-0777, and CVE-2018-0781. |
Affected by 156 other vulnerabilities. |
|
VCID-99dg-rm43-9qef
Aliases: CVE-2019-1427 |
Affected by 33 other vulnerabilities. |
|
|
VCID-99ef-7s16-yyeq
Aliases: CVE-2019-1195 GHSA-ppxc-pmx9-qjv9 |
Affected by 43 other vulnerabilities. |
|
|
VCID-9j8c-jjxf-abhd
Aliases: CVE-2019-1024 GHSA-g8q3-rcf9-qx4q |
Affected by 56 other vulnerabilities. |
|
|
VCID-9u2d-1vj5-sfbf
Aliases: CVE-2019-0610 |
Out-of-bounds Write A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0590, CVE-2019-0591, CVE-2019-0593, CVE-2019-0605, CVE-2019-0607, CVE-2019-0640, CVE-2019-0642, CVE-2019-0644, CVE-2019-0651, CVE-2019-0652, CVE-2019-0655. |
Affected by 95 other vulnerabilities. |
|
VCID-9v8t-kbf9-yye5
Aliases: CVE-2018-8280 GHSA-wwm6-r38h-ppg7 |
Out-of-bounds Write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8286, CVE-2018-8290, CVE-2018-8294. |
Affected by 117 other vulnerabilities. Affected by 109 other vulnerabilities. |
|
VCID-a3v3-mpys-vqas
Aliases: CVE-2020-0826 GHSA-6cc6-66f5-mxjj |
Affected by 13 other vulnerabilities. |
|
|
VCID-agvs-vu61-c7aq
Aliases: CVE-2020-0825 GHSA-j89m-gcjf-6ghp |
Affected by 13 other vulnerabilities. |
|
|
VCID-ahe3-4w9p-xfba
Aliases: CVE-2019-1308 GHSA-vw2g-5827-m9fp |
Affected by 36 other vulnerabilities. |
|
|
VCID-b6wu-ubuv-jqeg
Aliases: CVE-2017-11911 GHSA-qfcq-4vv7-9mq7 |
Improper Restriction of Operations within the Bounds of a Memory Buffer ChakraCore and Windows, and Windows Server allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11886, CVE-2017-11889, CVE-2017-11890, CVE-2017-11893, CVE-2017-11894, CVE-2017-11895, CVE-2017-11901, CVE-2017-11903, CVE-2017-11905, CVE-2017-11905, CVE-2017-11907, CVE-2017-11908, CVE-2017-11909, CVE-2017-11910, CVE-2017-11912, CVE-2017-11913, CVE-2017-11914, CVE-2017-11916, CVE-2017-11918, and CVE-2017-11930. |
Affected by 172 other vulnerabilities. |
|
VCID-bety-tpzp-qbg4
Aliases: CVE-2019-0991 GHSA-6973-94v8-5mgw |
Affected by 56 other vulnerabilities. |
|
|
VCID-bmba-t3ga-fuh6
Aliases: CVE-2018-0780 |
Out-of-bounds Read Microsoft Edge in Microsoft Windows Gold, and Windows Server allows an attacker to obtain information to further compromise the user's system, due to how the scripting engine handles objects in memory, aka "Scripting Engine Information Disclosure Vulnerability". This CVE ID is unique from CVE-2018-0767 and CVE-2018-0800. |
Affected by 156 other vulnerabilities. |
|
VCID-brne-zr1j-zqdz
Aliases: CVE-2018-0769 |
Out-of-bounds Write Microsoft Edge in Windows Gold, and Windows Server allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0758, CVE-2018-0762, CVE-2018-0768, CVE-2018-0770, CVE-2018-0772, CVE-2018-0773, CVE-2018-0774, CVE-2018-0775, CVE-2018-0776, CVE-2018-0777, CVE-2018-0778, and CVE-2018-0781. |
Affected by 156 other vulnerabilities. |
|
VCID-btua-a1pr-mbbe
Aliases: CVE-2018-8283 GHSA-ch84-pxpj-7hhm |
Out-of-bounds Write A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore. This CVE ID is unique from CVE-2018-8242, CVE-2018-8287, CVE-2018-8288, CVE-2018-8291, CVE-2018-8296, CVE-2018-8298. |
Affected by 109 other vulnerabilities. |
|
VCID-busw-m81p-67ch
Aliases: CVE-2018-0776 |
Out-of-bounds Write Microsoft Edge in Windows Gold, and Windows Server allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0758, CVE-2018-0762, CVE-2018-0768, CVE-2018-0769, CVE-2018-0770, CVE-2018-0772, CVE-2018-0773, CVE-2018-0774, CVE-2018-0775, CVE-2018-0777, CVE-2018-0778, and CVE-2018-0781. |
Affected by 156 other vulnerabilities. |
|
VCID-cfwk-subc-vfcz
Aliases: CVE-2018-8298 GHSA-wgw2-wwq8-c7wf |
ChakraCore RCE Vulnerability A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore. This CVE ID is unique from CVE-2018-8242, CVE-2018-8283, CVE-2018-8287, CVE-2018-8288, CVE-2018-8291, CVE-2018-8296. |
Affected by 109 other vulnerabilities. |
|
VCID-cmad-nxc3-3ugn
Aliases: CVE-2019-0655 |
Out-of-bounds Write A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0590, CVE-2019-0591, CVE-2019-0593, CVE-2019-0605, CVE-2019-0607, CVE-2019-0610, CVE-2019-0640, CVE-2019-0642, CVE-2019-0644, CVE-2019-0651, CVE-2019-0652. |
Affected by 95 other vulnerabilities. |
|
VCID-crny-hnyj-xkg8
Aliases: CVE-2018-0994 GHSA-g549-jfg6-98ch |
Out-of-bounds Write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-0979, CVE-2018-0980, CVE-2018-0990, CVE-2018-0993, CVE-2018-0995, CVE-2018-1019. |
Affected by 125 other vulnerabilities. |
|
VCID-cy9w-cuk8-73bk
Aliases: CVE-2018-0860 GHSA-v3xp-3wpq-rvhp |
Out-of-bounds Write Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0834, CVE-2018-0835, CVE-2018-0836, CVE-2018-0837, CVE-2018-0838, CVE-2018-0840, CVE-2018-0856, CVE-2018-0857, CVE-2018-0858, CVE-2018-0859, CVE-2018-0861, and CVE-2018-0866. |
Affected by 155 other vulnerabilities. |
|
VCID-dc3y-6mb9-6fe1
Aliases: CVE-2018-0946 GHSA-wc67-4cg3-35wf |
Out-of-bounds Write A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-0945, CVE-2018-0951, CVE-2018-0953, CVE-2018-0954, CVE-2018-0955, CVE-2018-1022, CVE-2018-8114, CVE-2018-8122, CVE-2018-8128, CVE-2018-8137, CVE-2018-8139. |
Affected by 125 other vulnerabilities. Affected by 123 other vulnerabilities. |
|
VCID-dcer-1uh1-a7h9
Aliases: CVE-2018-8139 GHSA-5hxp-3237-j2hp |
Out-of-bounds Read A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-0945, CVE-2018-0946, CVE-2018-0951, CVE-2018-0953, CVE-2018-0954, CVE-2018-0955, CVE-2018-1022, CVE-2018-8114, CVE-2018-8122, CVE-2018-8128, CVE-2018-8137. |
Affected by 125 other vulnerabilities. Affected by 123 other vulnerabilities. |
|
VCID-djs1-ab5r-bbd4
Aliases: CVE-2019-1052 GHSA-v8jw-x9wq-hw4v |
Affected by 56 other vulnerabilities. |
|
|
VCID-dsy7-n3h6-rbg9
Aliases: CVE-2019-1051 GHSA-fxrx-5j36-pwg5 |
Affected by 56 other vulnerabilities. |
|
|
VCID-dx5m-ppqe-cuej
Aliases: CVE-2020-0823 GHSA-wvhv-rr3v-vhpj |
Affected by 13 other vulnerabilities. |
|
|
VCID-e1b9-bq4b-9fh7
Aliases: CVE-2019-0990 |
Exposure of Sensitive Information to an Unauthorized Actor An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory in Microsoft Edge, aka 'Scripting Engine Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1023. |
Affected by 56 other vulnerabilities. |
|
VCID-e2ha-d254-ckbn
Aliases: CVE-2018-0874 GHSA-67f9-qmg7-fmcq |
Out-of-bounds Write ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the Chakra scripting engine handles objects in memory, aka "Chakra Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0872, CVE-2018-0873, CVE-2018-0930, CVE-2018-0931, CVE-2018-0933, CVE-2018-0934, CVE-2018-0936, and CVE-2018-0937. |
Affected by 145 other vulnerabilities. |
|
VCID-ewzn-6edc-x7e7
Aliases: CVE-2018-0931 GHSA-h575-j3ph-hjvc |
Out-of-bounds Write ChakraCore and Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the Chakra scripting engine handles objects in memory, aka "Chakra Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0872, CVE-2018-0873, CVE-2018-0874, CVE-2018-0930, CVE-2018-0933, CVE-2018-0934, CVE-2018-0936, and CVE-2018-0937. |
Affected by 145 other vulnerabilities. |
|
VCID-ex9d-ewbz-ubb5
Aliases: CVE-2020-1180 GHSA-wc43-7wj6-4ggr |
Affected by 3 other vulnerabilities. |
|
|
VCID-eygy-bzey-7yaq
Aliases: CVE-2019-1062 GHSA-rh4p-g7x6-8pqg |
Affected by 50 other vulnerabilities. |
|
|
VCID-ezfu-mmfd-93dk
Aliases: CVE-2018-0939 GHSA-xgcc-r2f3-rq6p |
Out-of-bounds Write ChakraCore and Microsoft Edge in Windows 10 1703 and 1709 allow information disclosure, due to how the scripting engine handles objects in memory, aka "Scripting Engine Information Disclosure Vulnerability". This CVE ID is unique from CVE-2018-0891. |
Affected by 145 other vulnerabilities. |
|
VCID-f8m6-a9a9-juhw
Aliases: CVE-2018-8287 GHSA-p97q-j98q-f98w |
Out-of-bounds Write A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore, Internet Explorer, Microsoft Edge, Internet Explorer This CVE ID is unique from CVE-2018-8242, CVE-2018-8283, CVE-2018-8288, CVE-2018-8291, CVE-2018-8296, CVE-2018-8298. |
Affected by 109 other vulnerabilities. |
|
VCID-fedc-anrx-ufg2
Aliases: CVE-2019-0812 GHSA-rpfg-xf88-cq5r |
Out-of-bounds Write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0806, CVE-2019-0810, CVE-2019-0829, CVE-2019-0860, CVE-2019-0861. |
Affected by 81 other vulnerabilities. |
|
VCID-fj84-9g1p-vfa5
Aliases: CVE-2019-1426 |
Affected by 33 other vulnerabilities. |
|
|
VCID-fr86-y4tg-9ycp
Aliases: CVE-2020-0813 GHSA-vvvh-5xrm-pxff |
Affected by 13 other vulnerabilities. |
|
|
VCID-fxfn-jq82-n3fy
Aliases: CVE-2020-0712 GHSA-w6qf-35f2-j6h7 |
Affected by 28 other vulnerabilities. |
|
|
VCID-fzjt-qse7-kbd5
Aliases: CVE-2019-1106 GHSA-mg98-x2cm-4cpf |
Affected by 50 other vulnerabilities. |
|
|
VCID-g188-1f2w-cqa8
Aliases: CVE-2018-0872 GHSA-h9h7-4jfm-3fxr |
Out-of-bounds Write ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the Chakra scripting engine handles objects in memory, aka "Chakra Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0873, CVE-2018-0874, CVE-2018-0930, CVE-2018-0931, CVE-2018-0933, CVE-2018-0934, CVE-2018-0936, and CVE-2018-0937. |
Affected by 145 other vulnerabilities. |
|
VCID-ggf4-u8qd-eff7
Aliases: CVE-2020-0767 GHSA-fhc8-h6hr-h9mq |
Affected by 28 other vulnerabilities. |
|
|
VCID-gu4y-gk9v-dbep
Aliases: CVE-2020-0833 GHSA-86gw-g9jv-8vfg |
Out-of-bounds Write A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0768, CVE-2020-0823, CVE-2020-0825, CVE-2020-0826, CVE-2020-0827, CVE-2020-0828, CVE-2020-0829, CVE-2020-0830, CVE-2020-0831, CVE-2020-0832, CVE-2020-0848. |
Affected by 13 other vulnerabilities. |
|
VCID-gvk1-8a7a-p3fm
Aliases: CVE-2018-0990 GHSA-vh9x-fprq-2hhj |
Out-of-bounds Write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-0979, CVE-2018-0980, CVE-2018-0993, CVE-2018-0994, CVE-2018-0995, CVE-2018-1019. |
Affected by 125 other vulnerabilities. |
|
VCID-gvr1-zbs9-sffy
Aliases: CVE-2017-11905 GHSA-72gm-pp6q-gpx5 |
Improper Restriction of Operations within the Bounds of a Memory Buffer ChakraCore and Microsoft Edge in Windows, and Windows Server allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11886, CVE-2017-11889, CVE-2017-11890, CVE-2017-11893, CVE-2017-11894, CVE-2017-11895, CVE-2017-11901, CVE-2017-11903, CVE-2017-11907, CVE-2017-11908, CVE-2017-11909, CVE-2017-11910, CVE-2017-11911, CVE-2017-11912, CVE-2017-11913, CVE-2017-11914, CVE-2017-11916, CVE-2017-11918, and CVE-2017-11930. |
Affected by 172 other vulnerabilities. |
|
VCID-gyyj-1jxm-vfbu
Aliases: CVE-2019-0593 |
Out-of-bounds Write A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0590, CVE-2019-0591, CVE-2019-0605, CVE-2019-0607, CVE-2019-0610, CVE-2019-0640, CVE-2019-0642, CVE-2019-0644, CVE-2019-0651, CVE-2019-0652, CVE-2019-0655. |
Affected by 95 other vulnerabilities. |
|
VCID-h1h7-2h76-efgr
Aliases: CVE-2018-0936 GHSA-6v8r-83v3-rmrf |
Out-of-bounds Write ChakraCore and Microsoft Windows 10 1709 allow remote code execution, due to how the Chakra scripting engine handles objects in memory, aka "Chakra Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0872, CVE-2018-0873, CVE-2018-0874, CVE-2018-0930, CVE-2018-0931, CVE-2018-0933, CVE-2018-0934, and CVE-2018-0937. |
Affected by 145 other vulnerabilities. |
|
VCID-hagb-nxwq-tbg3
Aliases: CVE-2019-0642 |
Out-of-bounds Write A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0590, CVE-2019-0591, CVE-2019-0593, CVE-2019-0605, CVE-2019-0607, CVE-2019-0610, CVE-2019-0640, CVE-2019-0644, CVE-2019-0651, CVE-2019-0652, CVE-2019-0655. |
Affected by 95 other vulnerabilities. |
|
VCID-hbcj-83rp-jbd4
Aliases: CVE-2018-8130 GHSA-3fvw-g6mr-w247 |
Out-of-bounds Write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-0943, CVE-2018-8133, CVE-2018-8145, CVE-2018-8177. |
Affected by 125 other vulnerabilities. Affected by 123 other vulnerabilities. |
|
VCID-hcfa-1wq4-wyga
Aliases: CVE-2019-0925 GHSA-v648-p92f-9996 |
Out-of-bounds Write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0912, CVE-2019-0913, CVE-2019-0914, CVE-2019-0915, CVE-2019-0916, CVE-2019-0917, CVE-2019-0922, CVE-2019-0923, CVE-2019-0924, CVE-2019-0927, CVE-2019-0933, CVE-2019-0937. |
Affected by 67 other vulnerabilities. |
|
VCID-hd4m-nbr1-rbd8
Aliases: CVE-2019-1196 GHSA-hfm2-fffh-v47v |
Affected by 43 other vulnerabilities. |
|
|
VCID-hdpy-kfn8-sbba
Aliases: CVE-2019-1298 GHSA-2452-3rwv-x89c |
Affected by 38 other vulnerabilities. |
|
|
VCID-hxe1-rzwm-5fak
Aliases: CVE-2018-0979 GHSA-25vh-gq6v-hrx5 |
Out-of-bounds Write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-0980, CVE-2018-0990, CVE-2018-0993, CVE-2018-0994, CVE-2018-0995, CVE-2018-1019. |
Affected by 125 other vulnerabilities. |
|
VCID-j146-jsyz-y3gj
Aliases: CVE-2020-1037 GHSA-8xv4-c7rq-j577 |
Affected by 10 other vulnerabilities. Affected by 9 other vulnerabilities. |
|
|
VCID-j1gx-jhbn-k3gd
Aliases: CVE-2020-0832 GHSA-2qgv-2cv4-g4cg |
Out-of-bounds Write A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0768, CVE-2020-0823, CVE-2020-0825, CVE-2020-0826, CVE-2020-0827, CVE-2020-0828, CVE-2020-0829, CVE-2020-0830, CVE-2020-0831, CVE-2020-0833, CVE-2020-0848. |
Affected by 13 other vulnerabilities. |
|
VCID-je2z-mcvk-gqhp
Aliases: CVE-2019-0924 GHSA-prxj-c66c-4gcf |
Out-of-bounds Write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0912, CVE-2019-0913, CVE-2019-0914, CVE-2019-0915, CVE-2019-0916, CVE-2019-0917, CVE-2019-0922, CVE-2019-0923, CVE-2019-0925, CVE-2019-0927, CVE-2019-0933, CVE-2019-0937. |
Affected by 67 other vulnerabilities. |
|
VCID-jerx-5eyv-ebeq
Aliases: CVE-2017-11811 |
Improper Restriction of Operations within the Bounds of a Memory Buffer ChakraCore and Microsoft Edge in Microsoft Windows Gold, and Windows Server allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11792, CVE-2017-11793, CVE-2017-11796, CVE-2017-11797, CVE-2017-11798, CVE-2017-11799, CVE-2017-11800, CVE-2017-11801, CVE-2017-11802, CVE-2017-11804, CVE-2017-11805, CVE-2017-11806, CVE-2017-11807, CVE-2017-11808, CVE-2017-11809, CVE-2017-11810, CVE-2017-11812, and CVE-2017-11821. |
Affected by 185 other vulnerabilities. |
|
VCID-jmx4-vvk4-ykdk
Aliases: CVE-2019-0639 GHSA-6jf5-rmhv-38cw |
Integer Overflow or Wraparound A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0609, CVE-2019-0680, CVE-2019-0769, CVE-2019-0770, CVE-2019-0771, CVE-2019-0773, CVE-2019-0783. |
Affected by 88 other vulnerabilities. |
|
VCID-jwms-xqgm-dydw
Aliases: CVE-2020-0812 GHSA-g67x-mgrv-m3gv |
Affected by 13 other vulnerabilities. |
|
|
VCID-k7p1-rcdv-huga
Aliases: CVE-2019-1003 GHSA-w32p-76xr-88pc |
Affected by 56 other vulnerabilities. |
|
|
VCID-kbee-zr5j-hkat
Aliases: CVE-2018-0770 |
Out-of-bounds Write Microsoft Edge in Windows Gold, and Windows Server allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0758, CVE-2018-0762, CVE-2018-0768, CVE-2018-0769, CVE-2018-0772, CVE-2018-0773, CVE-2018-0774, CVE-2018-0775, CVE-2018-0776, CVE-2018-0777, CVE-2018-0778, and CVE-2018-0781. |
Affected by 156 other vulnerabilities. |
|
VCID-keaw-uz84-9qer
Aliases: CVE-2020-0713 GHSA-g6mc-8679-ghx9 |
Affected by 28 other vulnerabilities. |
|
|
VCID-kkru-29c6-pfdd
Aliases: CVE-2020-0830 GHSA-g644-6fg4-hrh9 |
Affected by 13 other vulnerabilities. |
|
|
VCID-kque-3gkp-zuaa
Aliases: CVE-2020-1057 GHSA-9f8c-f7h4-xghf |
Affected by 3 other vulnerabilities. |
|
|
VCID-kua2-9yb8-gkgq
Aliases: CVE-2017-11910 GHSA-735f-mx7h-46w8 |
Improper Restriction of Operations within the Bounds of a Memory Buffer ChakraCore and Windows Gold, and Windows Server allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11886, CVE-2017-11889, CVE-2017-11890, CVE-2017-11893, CVE-2017-11894, CVE-2017-11895, CVE-2017-11901, CVE-2017-11903, CVE-2017-11905, CVE-2017-11905, CVE-2017-11907, CVE-2017-11908, CVE-2017-11909, CVE-2017-11911, CVE-2017-11912, CVE-2017-11913, CVE-2017-11914, CVE-2017-11916, CVE-2017-11918, and CVE-2017-11930. |
Affected by 172 other vulnerabilities. |
|
VCID-m75x-ejxh-d7f8
Aliases: CVE-2020-0829 GHSA-jv2c-mhcq-6wp4 |
Affected by 13 other vulnerabilities. |
|
|
VCID-mczu-b3e6-5bgb
Aliases: CVE-2019-0649 GHSA-6c6r-39cv-x5fq |
Privilege Escalation A vulnerability exists in Microsoft Chakra JIT server, aka 'Scripting Engine Elevation of Privileged Vulnerability'. |
Affected by 95 other vulnerabilities. |
|
VCID-mdxe-tfgf-d7g5
Aliases: CVE-2019-1141 GHSA-cwp9-956f-vcwh |
Affected by 43 other vulnerabilities. |
|
|
VCID-me7g-49jk-63c2
Aliases: CVE-2018-8275 |
Out-of-bounds Write A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8125, CVE-2018-8262, CVE-2018-8274, CVE-2018-8279, CVE-2018-8301. |
Affected by 117 other vulnerabilities. |
|
VCID-mknt-947r-x3dq
Aliases: CVE-2018-0873 GHSA-wc52-2xwv-h7xr |
Out-of-bounds Write ChakraCore and Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the Chakra scripting engine handles objects in memory, aka "Chakra Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0872, CVE-2018-0874, CVE-2018-0930, CVE-2018-0931, CVE-2018-0933, CVE-2018-0934, CVE-2018-0936, and CVE-2018-0937. |
Affected by 145 other vulnerabilities. |
|
VCID-mksq-kg9m-uqdz
Aliases: CVE-2018-1022 GHSA-wjmf-6x7g-xq67 |
Out-of-bounds Write A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore, Internet Explorer, Microsoft Edge. This CVE ID is unique from CVE-2018-0945, CVE-2018-0946, CVE-2018-0951, CVE-2018-0953, CVE-2018-0954, CVE-2018-0955, CVE-2018-8114, CVE-2018-8122, CVE-2018-8128, CVE-2018-8137, CVE-2018-8139. |
Affected by 125 other vulnerabilities. Affected by 123 other vulnerabilities. |
|
VCID-mm2r-t2rz-7ygp
Aliases: CVE-2019-0915 GHSA-fm9p-5m9f-rq85 |
Out-of-bounds Write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0912, CVE-2019-0913, CVE-2019-0914, CVE-2019-0916, CVE-2019-0917, CVE-2019-0922, CVE-2019-0923, CVE-2019-0924, CVE-2019-0925, CVE-2019-0927, CVE-2019-0933, CVE-2019-0937. |
Affected by 67 other vulnerabilities. |
|
VCID-mmba-qzvj-37df
Aliases: CVE-2019-0917 GHSA-rx34-jff5-ph35 |
Out-of-bounds Write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0912, CVE-2019-0913, CVE-2019-0914, CVE-2019-0915, CVE-2019-0916, CVE-2019-0922, CVE-2019-0923, CVE-2019-0924, CVE-2019-0925, CVE-2019-0927, CVE-2019-0933, CVE-2019-0937. |
Affected by 67 other vulnerabilities. |
|
VCID-mnd4-84rp-mbb4
Aliases: CVE-2018-8133 GHSA-8rqh-8726-83h7 |
Access of Resource Using Incompatible Type ('Type Confusion') A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-0943, CVE-2018-8130, CVE-2018-8145, CVE-2018-8177. |
Affected by 125 other vulnerabilities. Affected by 123 other vulnerabilities. |
|
VCID-mpe4-db65-4qab
Aliases: CVE-2017-11918 |
Improper Restriction of Operations within the Bounds of a Memory Buffer ChakraCore and Microsoft Edge in Windows Gold, and Windows Server allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11886, CVE-2017-11889, CVE-2017-11890, CVE-2017-11893, CVE-2017-11894, CVE-2017-11895, CVE-2017-11901, CVE-2017-11903, CVE-2017-11905, CVE-2017-11905, CVE-2017-11907, CVE-2017-11908, CVE-2017-11909, CVE-2017-11910, CVE-2017-11911, CVE-2017-11912, CVE-2017-11913, CVE-2017-11914, CVE-2017-11916, and CVE-2017-11930. |
Affected by 172 other vulnerabilities. |
|
VCID-mqsb-hzpy-5ygv
Aliases: CVE-2018-0775 |
Out-of-bounds Write Microsoft Edge in Windows allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0758, CVE-2018-0762, CVE-2018-0768, CVE-2018-0769, CVE-2018-0770, CVE-2018-0772, CVE-2018-0773, CVE-2018-0774, CVE-2018-0776, CVE-2018-0777, CVE-2018-0778, and CVE-2018-0781. |
Affected by 156 other vulnerabilities. |
|
VCID-mvnv-zj61-abgg
Aliases: CVE-2019-1140 GHSA-758c-g2ff-9444 |
Affected by 43 other vulnerabilities. |
|
|
VCID-n78g-bzfs-hqgw
Aliases: CVE-2019-0989 GHSA-9824-rp6m-xx9w |
Affected by 56 other vulnerabilities. |
|
|
VCID-nc4u-h6aj-5qag
Aliases: CVE-2020-0970 GHSA-233h-59m2-qqf2 |
Affected by 10 other vulnerabilities. |
|
|
VCID-ncbk-mcwh-3fa3
Aliases: CVE-2017-11821 GHSA-rhwh-jw9h-4m49 |
Improper Restriction of Operations within the Bounds of a Memory Buffer ChakraCore and Microsoft Edge in Microsoft Windows allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11792, CVE-2017-11793, CVE-2017-11796, CVE-2017-11797, CVE-2017-11798, CVE-2017-11799, CVE-2017-11800, CVE-2017-11801, CVE-2017-11802, CVE-2017-11804, CVE-2017-11805, CVE-2017-11806, CVE-2017-11807, CVE-2017-11808, CVE-2017-11809, CVE-2017-11810, CVE-2017-11811, and CVE-2017-11812. |
Affected by 188 other vulnerabilities. Affected by 185 other vulnerabilities. |
|
VCID-nct4-jbw7-4yef
Aliases: CVE-2020-0768 GHSA-pfrg-w49c-8432 |
Affected by 13 other vulnerabilities. |
|
|
VCID-nd4s-mcgx-s3bs
Aliases: CVE-2019-1092 GHSA-2x75-mf24-588m |
Affected by 50 other vulnerabilities. |
|
|
VCID-nej3-zdz8-2ycm
Aliases: CVE-2017-8659 GHSA-h6m7-jphx-f9p5 |
Affected by 0 other vulnerabilities. Affected by 192 other vulnerabilities. |
|
|
VCID-nh3m-s7fe-bqek
Aliases: CVE-2018-0774 |
Out-of-bounds Write Microsoft Edge in Windows allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0758, CVE-2018-0762, CVE-2018-0768, CVE-2018-0769, CVE-2018-0770, CVE-2018-0772, CVE-2018-0773, CVE-2018-0775, CVE-2018-0776, CVE-2018-0777, CVE-2018-0778, and CVE-2018-0781. |
Affected by 156 other vulnerabilities. |
|
VCID-njsb-3b47-77hk
Aliases: CVE-2019-0771 GHSA-fvpg-qx3g-7mp7 |
Out-of-bounds Write A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0609, CVE-2019-0639, CVE-2019-0680, CVE-2019-0769, CVE-2019-0770, CVE-2019-0773, CVE-2019-0783. |
Affected by 88 other vulnerabilities. |
|
VCID-nn2u-snsx-83hq
Aliases: CVE-2019-1103 GHSA-vmf5-924f-25f2 |
Affected by 50 other vulnerabilities. |
|
|
VCID-nypa-dv6a-aydu
Aliases: CVE-2019-0773 GHSA-3w9q-c44j-37jj |
Out-of-bounds Write A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0609, CVE-2019-0639, CVE-2019-0680, CVE-2019-0769, CVE-2019-0770, CVE-2019-0771, CVE-2019-0783. |
Affected by 88 other vulnerabilities. |
|
VCID-nyyv-c55j-pyea
Aliases: CVE-2018-0933 GHSA-3j65-2jcq-w9fr |
Out-of-bounds Write ChakraCore and Microsoft Windows Gold, and Windows Server allows remote code execution, due to how the Chakra scripting engine handles objects in memory, aka "Chakra Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0872, CVE-2018-0873, CVE-2018-0874, CVE-2018-0930, CVE-2018-0931, CVE-2018-0934, CVE-2018-0936, and CVE-2018-0937. |
Affected by 145 other vulnerabilities. |
|
VCID-pusx-pa1h-yyfu
Aliases: CVE-2020-0710 GHSA-67xp-4726-4978 |
Affected by 28 other vulnerabilities. |
|
|
VCID-pxev-85t8-fug6
Aliases: CVE-2019-1023 |
Exposure of Sensitive Information to an Unauthorized Actor An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory in Microsoft Edge, aka 'Scripting Engine Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0990. |
Affected by 56 other vulnerabilities. |
|
VCID-pyt1-g2tu-eqb4
Aliases: CVE-2017-11805 GHSA-px6p-jxwr-27mc |
Improper Restriction of Operations within the Bounds of a Memory Buffer ChakraCore and Microsoft Edge in Microsoft Windows allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11792, CVE-2017-11793, CVE-2017-11796, CVE-2017-11797, CVE-2017-11798, CVE-2017-11799, CVE-2017-11800, CVE-2017-11801, CVE-2017-11802, CVE-2017-11804, CVE-2017-11806, CVE-2017-11807, CVE-2017-11808, CVE-2017-11809, CVE-2017-11810, CVE-2017-11811, CVE-2017-11812, and CVE-2017-11821. |
Affected by 188 other vulnerabilities. Affected by 185 other vulnerabilities. |
|
VCID-q5tf-a4s5-7qah
Aliases: CVE-2020-1219 |
Affected by 7 other vulnerabilities. |
|
|
VCID-qgsm-c5dq-bfb8
Aliases: CVE-2018-0945 GHSA-5439-x5v5-2vhj |
Out-of-bounds Write A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-0946, CVE-2018-0951, CVE-2018-0953, CVE-2018-0954, CVE-2018-0955, CVE-2018-1022, CVE-2018-8114, CVE-2018-8122, CVE-2018-8128, CVE-2018-8137, CVE-2018-8139. |
Affected by 125 other vulnerabilities. Affected by 123 other vulnerabilities. |
|
VCID-qn21-udnm-aqc6
Aliases: CVE-2020-1065 GHSA-9hjg-j983-mqcc |
Affected by 9 other vulnerabilities. |
|
|
VCID-qndq-e3vk-ybeu
Aliases: CVE-2019-1300 GHSA-grvw-q343-58wh |
Affected by 38 other vulnerabilities. |
|
|
VCID-qwbu-jvxv-bbej
Aliases: CVE-2017-11914 GHSA-8r5c-8v97-g7vh |
Improper Restriction of Operations within the Bounds of a Memory Buffer ChakraCore and Microsoft Edge in Windows, and Windows Server allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11886, CVE-2017-11889, CVE-2017-11890, CVE-2017-11893, CVE-2017-11894, CVE-2017-11895, CVE-2017-11901, CVE-2017-11903, CVE-2017-11905, CVE-2017-11905, CVE-2017-11907, CVE-2017-11908, CVE-2017-11909, CVE-2017-11910, CVE-2017-11911, CVE-2017-11912, CVE-2017-11913, CVE-2017-11916, CVE-2017-11918, and CVE-2017-11930. |
Affected by 172 other vulnerabilities. |
|
VCID-qxax-card-uyfy
Aliases: CVE-2017-11801 GHSA-f8f9-q5hg-9c7q |
Exposure of Sensitive Information to an Unauthorized Actor ChakraCore allows an attacker to execute arbitrary code in the context of the current user, due to how the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-11792, CVE-2017-11793, CVE-2017-11796, CVE-2017-11797, CVE-2017-11798, CVE-2017-11799, CVE-2017-11800, CVE-2017-11802, CVE-2017-11804, CVE-2017-11805, CVE-2017-11806, CVE-2017-11807, CVE-2017-11808, CVE-2017-11809, CVE-2017-11810, CVE-2017-11811, CVE-2017-11812, and CVE-2017-11821. |
Affected by 185 other vulnerabilities. |
|
VCID-r16a-n5nn-nybp
Aliases: CVE-2019-1237 GHSA-q99r-j969-6jwr |
Affected by 38 other vulnerabilities. |
|
|
VCID-r7nx-huw6-2kaw
Aliases: CVE-2020-0828 GHSA-c8qc-62qv-5p2x |
Affected by 13 other vulnerabilities. |
|
|
VCID-rffd-vnyj-puc3
Aliases: CVE-2019-0922 GHSA-hrmm-f4j8-8vxc |
Out-of-bounds Write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0912, CVE-2019-0913, CVE-2019-0914, CVE-2019-0915, CVE-2019-0916, CVE-2019-0917, CVE-2019-0923, CVE-2019-0924, CVE-2019-0925, CVE-2019-0927, CVE-2019-0933, CVE-2019-0937. |
Affected by 67 other vulnerabilities. |
|
VCID-rkns-keya-cyfj
Aliases: CVE-2019-0769 GHSA-8qh8-cv77-h83g |
Out-of-bounds Write A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0609, CVE-2019-0639, CVE-2019-0680, CVE-2019-0770, CVE-2019-0771, CVE-2019-0773, CVE-2019-0783. |
Affected by 88 other vulnerabilities. |
|
VCID-rnva-ys32-7kbu
Aliases: CVE-2019-0592 GHSA-fv38-4c3m-25v8 |
Out-of-bounds Write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0611. |
Affected by 88 other vulnerabilities. |
|
VCID-rs19-wsxa-47cn
Aliases: CVE-2018-0937 GHSA-6c2v-xc8f-fvf7 |
Out-of-bounds Write ChakraCore and Microsoft Windows 10 1703 and 1709 allow remote code execution, due to how the Chakra scripting engine handles objects in memory, aka "Chakra Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0872, CVE-2018-0873, CVE-2018-0874, CVE-2018-0930, CVE-2018-0931, CVE-2018-0933, CVE-2018-0934, and CVE-2018-0936. |
Affected by 145 other vulnerabilities. |
|
VCID-rxgn-xep7-fya7
Aliases: CVE-2019-1428 |
Affected by 33 other vulnerabilities. |
|
|
VCID-ry6a-46j6-ybgk
Aliases: CVE-2018-0758 |
Out-of-bounds Write Microsoft Edge in Windows Gold, and Windows Server allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0762, CVE-2018-0768, CVE-2018-0769, CVE-2018-0770, CVE-2018-0772, CVE-2018-0773, CVE-2018-0774, CVE-2018-0775, CVE-2018-0776, CVE-2018-0777, CVE-2018-0778, and CVE-2018-0781. |
Affected by 156 other vulnerabilities. |
|
VCID-saxs-fd9n-cyem
Aliases: CVE-2018-8137 GHSA-frh8-wrx9-gc53 |
Out-of-bounds Write A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-0945, CVE-2018-0946, CVE-2018-0951, CVE-2018-0953, CVE-2018-0954, CVE-2018-0955, CVE-2018-1022, CVE-2018-8114, CVE-2018-8122, CVE-2018-8128, CVE-2018-8139. |
Affected by 125 other vulnerabilities. Affected by 123 other vulnerabilities. |
|
VCID-seum-3u3s-xuhq
Aliases: CVE-2020-0969 GHSA-jr84-p554-62pm |
Affected by 10 other vulnerabilities. |
|
|
VCID-shdw-sqhu-v3aa
Aliases: CVE-2018-0980 GHSA-xmvg-c4x3-9qwp |
Out-of-bounds Write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-0979, CVE-2018-0990, CVE-2018-0993, CVE-2018-0994, CVE-2018-0995, CVE-2018-1019. |
Affected by 125 other vulnerabilities. |
|
VCID-sqfw-zhmk-mkbe
Aliases: CVE-2019-0591 |
Out-of-bounds Write A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0590, CVE-2019-0593, CVE-2019-0605, CVE-2019-0607, CVE-2019-0610, CVE-2019-0640, CVE-2019-0642, CVE-2019-0644, CVE-2019-0651, CVE-2019-0652, CVE-2019-0655. |
Affected by 95 other vulnerabilities. |
|
VCID-st54-u8tz-33gs
Aliases: CVE-2018-0762 |
Out-of-bounds Write Internet Explorer in Microsoft Windows 7 SP1, Windows Server and R2 SP1, Windows and Windows RT, Windows Server and R2, and Internet Explorer and Microsoft Edge in Windows Gold, and Windows Server allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0758, CVE-2018-0768, CVE-2018-0769, CVE-2018-0770, CVE-2018-0772, CVE-2018-0773, CVE-2018-0774, CVE-2018-0775, CVE-2018-0776, CVE-2018-0777, CVE-2018-0778, and CVE-2018-0781. |
Affected by 156 other vulnerabilities. |
|
VCID-suhe-2a7n-zbgr
Aliases: CVE-2020-1073 GHSA-g3m9-qrfj-xw4g |
Affected by 7 other vulnerabilities. |
|
|
VCID-t5b1-tsu5-1ybn
Aliases: CVE-2020-0831 GHSA-h2xm-2p6w-mj2v |
Affected by 13 other vulnerabilities. |
|
|
VCID-t8bg-6rsw-ebf8
Aliases: CVE-2019-0806 GHSA-hg36-rmmm-hc5r |
Out-of-bounds Write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0810, CVE-2019-0812, CVE-2019-0829, CVE-2019-0860, CVE-2019-0861. |
Affected by 81 other vulnerabilities. |
|
VCID-t9j3-4vw9-17bf
Aliases: CVE-2021-42279 GHSA-jgrp-6qqq-3284 |
There are no reported fixed by versions. | |
|
VCID-tnh1-zjdq-6qhd
Aliases: CVE-2019-0933 GHSA-5rq8-3wvf-wrfg |
Out-of-bounds Write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0912, CVE-2019-0913, CVE-2019-0914, CVE-2019-0915, CVE-2019-0916, CVE-2019-0917, CVE-2019-0922, CVE-2019-0923, CVE-2019-0924, CVE-2019-0925, CVE-2019-0927, CVE-2019-0937. |
Affected by 67 other vulnerabilities. |
|
VCID-tnhg-2f5h-cfaa
Aliases: CVE-2019-1307 GHSA-6j89-jhpr-849f |
Affected by 36 other vulnerabilities. |
|
|
VCID-tpdy-ttbh-5kh6
Aliases: CVE-2018-0777 |
Out-of-bounds Write Microsoft Edge in Windows Gold, and Windows Server allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0758, CVE-2018-0762, CVE-2018-0768, CVE-2018-0769, CVE-2018-0770, CVE-2018-0772, CVE-2018-0773, CVE-2018-0774, CVE-2018-0775, CVE-2018-0776, CVE-2018-0778, and CVE-2018-0781. |
Affected by 156 other vulnerabilities. |
|
VCID-tr1v-12ux-bueh
Aliases: CVE-2018-8371 GHSA-85j8-g29g-m326 |
Out-of-bounds Write A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripting Engine Memory Corruption Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10. This CVE ID is unique from CVE-2018-8353, CVE-2018-8355, CVE-2018-8359, CVE-2018-8372, CVE-2018-8373, CVE-2018-8385, CVE-2018-8389, CVE-2018-8390. |
Affected by 109 other vulnerabilities. |
|
VCID-udcs-da57-q7hs
Aliases: CVE-2019-0652 |
Out-of-bounds Write A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0590, CVE-2019-0591, CVE-2019-0593, CVE-2019-0605, CVE-2019-0607, CVE-2019-0610, CVE-2019-0640, CVE-2019-0642, CVE-2019-0644, CVE-2019-0651, CVE-2019-0655. |
Affected by 95 other vulnerabilities. |
|
VCID-ufp7-z62w-hqgq
Aliases: CVE-2020-0878 |
Affected by 3 other vulnerabilities. |
|
|
VCID-uwda-x8ud-b7ht
Aliases: CVE-2018-0934 GHSA-phcc-frh9-q545 |
Out-of-bounds Write ChakraCore and Microsoft Windows Gold, and Windows Server allows remote code execution, due to how the Chakra scripting engine handles objects in memory, aka "Chakra Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0872, CVE-2018-0873, CVE-2018-0874, CVE-2018-0930, CVE-2018-0931, CVE-2018-0933, CVE-2018-0936, and CVE-2018-0937. |
Affected by 145 other vulnerabilities. |
|
VCID-v4er-vyja-qffa
Aliases: CVE-2018-8178 |
Out-of-bounds Write A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory, aka "Microsoft Browser Memory Corruption Vulnerability." This affects ChakraCore, Internet Explorer, Microsoft Edge. |
Affected by 125 other vulnerabilities. |
|
VCID-v7k3-6juv-47gr
Aliases: CVE-2017-11889 GHSA-xw5f-g937-wgm2 |
Improper Restriction of Operations within the Bounds of a Memory Buffer ChakraCore and Microsoft Edge in Windows Gold, and Windows Server allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11886, CVE-2017-11890, CVE-2017-11893, CVE-2017-11894, CVE-2017-11895, CVE-2017-11901, CVE-2017-11903, CVE-2017-11905, CVE-2017-11907, CVE-2017-11908, CVE-2017-11909, CVE-2017-11910, CVE-2017-11911, CVE-2017-11912, CVE-2017-11913, CVE-2017-11914, CVE-2017-11916, CVE-2017-11918, and CVE-2017-11930. |
Affected by 172 other vulnerabilities. |
|
VCID-vaa5-jutt-1ydh
Aliases: CVE-2018-0993 GHSA-7c7v-g484-j4cf |
Out-of-bounds Write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-0979, CVE-2018-0980, CVE-2018-0990, CVE-2018-0994, CVE-2018-0995, CVE-2018-1019. |
Affected by 125 other vulnerabilities. |
|
VCID-vk99-umu1-2bag
Aliases: CVE-2018-8288 GHSA-4f79-fxh8-vgq2 |
Out-of-bounds Write A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore, Internet Explorer, Microsoft Edge. This CVE ID is unique from CVE-2018-8242, CVE-2018-8283, CVE-2018-8287, CVE-2018-8291, CVE-2018-8296, CVE-2018-8298. |
Affected by 109 other vulnerabilities. |
|
VCID-vser-kewx-akh4
Aliases: CVE-2019-0644 |
Out-of-bounds Write A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0590, CVE-2019-0591, CVE-2019-0593, CVE-2019-0605, CVE-2019-0607, CVE-2019-0610, CVE-2019-0640, CVE-2019-0642, CVE-2019-0651, CVE-2019-0652, CVE-2019-0655. |
Affected by 95 other vulnerabilities. |
|
VCID-vx2e-zgfx-dkau
Aliases: CVE-2017-11799 |
Improper Restriction of Operations within the Bounds of a Memory Buffer ChakraCore and Microsoft Edge in Microsoft Windows Gold, and Windows Server allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11792, CVE-2017-11793, CVE-2017-11796, CVE-2017-11797, CVE-2017-11798, CVE-2017-11800, CVE-2017-11801, CVE-2017-11802, CVE-2017-11804, CVE-2017-11805, CVE-2017-11806, CVE-2017-11807, CVE-2017-11808, CVE-2017-11809, CVE-2017-11810, CVE-2017-11811, CVE-2017-11812, and CVE-2017-11821. |
Affected by 188 other vulnerabilities. |
|
VCID-vxjj-cqyk-w3hd
Aliases: CVE-2019-1107 GHSA-5rcr-q3rx-j7vr |
Affected by 50 other vulnerabilities. |
|
|
VCID-w2kf-rnn3-huc8
Aliases: CVE-2019-0605 |
Out-of-bounds Write A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0590, CVE-2019-0591, CVE-2019-0593, CVE-2019-0607, CVE-2019-0610, CVE-2019-0640, CVE-2019-0642, CVE-2019-0644, CVE-2019-0651, CVE-2019-0652, CVE-2019-0655. |
Affected by 95 other vulnerabilities. |
|
VCID-w8bh-fcm2-2yc4
Aliases: CVE-2018-0930 GHSA-wc4x-9h9p-9494 |
Out-of-bounds Write ChakraCore and Microsoft Edge in Microsoft Windows 10 1709 allows remote code execution, due to how the Chakra scripting engine handles objects in memory, aka "Chakra Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0872, CVE-2018-0873, CVE-2018-0874, CVE-2018-0931, CVE-2018-0933, CVE-2018-0934, CVE-2018-0936, and CVE-2018-0937. |
Affected by 145 other vulnerabilities. |
|
VCID-wevg-rszb-9ufb
Aliases: CVE-2017-11912 |
Improper Restriction of Operations within the Bounds of a Memory Buffer ChakraCore, and Internet Explorer in Microsoft Windows 7 SP1, Windows Server and R2 SP1, Windows and Windows RT, Windows Server and R2, and Internet Explorer and Microsoft Edge in Windows Gold, and Windows Server allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11886, CVE-2017-11889, CVE-2017-11890, CVE-2017-11893, CVE-2017-11894, CVE-2017-11895, CVE-2017-11901, CVE-2017-11903, CVE-2017-11905, CVE-2017-11905, CVE-2017-11907, CVE-2017-11908, CVE-2017-11909, CVE-2017-11910, CVE-2017-11911, CVE-2017-11913, CVE-2017-11914, CVE-2017-11916, CVE-2017-11918, and CVE-2017-11930. |
Affected by 172 other vulnerabilities. |
|
VCID-wjjc-1wyd-87fp
Aliases: CVE-2018-8128 |
Out-of-bounds Write A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-0945, CVE-2018-0946, CVE-2018-0951, CVE-2018-0953, CVE-2018-0954, CVE-2018-0955, CVE-2018-1022, CVE-2018-8114, CVE-2018-8122, CVE-2018-8137, CVE-2018-8139. |
Affected by 125 other vulnerabilities. |
|
VCID-x6wa-636e-zugv
Aliases: CVE-2019-0914 GHSA-h6wf-hvwc-fm77 |
Out-of-bounds Write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0912, CVE-2019-0913, CVE-2019-0915, CVE-2019-0916, CVE-2019-0917, CVE-2019-0922, CVE-2019-0923, CVE-2019-0924, CVE-2019-0925, CVE-2019-0927, CVE-2019-0933, CVE-2019-0937. |
Affected by 67 other vulnerabilities. |
|
VCID-xcd3-cznv-xuc8
Aliases: CVE-2018-8459 GHSA-pcgp-vfgq-mf5j |
Out-of-bounds Write A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8354, CVE-2018-8391, CVE-2018-8456, CVE-2018-8457. |
Affected by 109 other vulnerabilities. Affected by 110 other vulnerabilities. |
|
VCID-xd2n-4817-ffa1
Aliases: CVE-2020-1172 GHSA-xxfr-jrgh-x392 |
Affected by 3 other vulnerabilities. |
|
|
VCID-xk96-csb5-syac
Aliases: CVE-2018-0772 |
Out-of-bounds Write Internet Explorer in Microsoft Windows 7 SP1, Windows Server and R2 SP1, Windows and Windows RT, Windows Server and R2, and Internet Explorer and Microsoft Edge in Windows Gold, and Windows Server allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0758, CVE-2018-0762, CVE-2018-0768, CVE-2018-0769, CVE-2018-0770, CVE-2018-0773, CVE-2018-0774, CVE-2018-0775, CVE-2018-0776, CVE-2018-0777, CVE-2018-0778, and CVE-2018-0781. |
Affected by 156 other vulnerabilities. |
|
VCID-xkdp-evty-rubw
Aliases: CVE-2019-0648 GHSA-wwfw-m54g-gv72 |
ChakraCore information disclosure vulnerability An information disclosure vulnerability exists when Chakra improperly discloses the contents of its memory, which could provide an attacker with information to further compromise the user's computer or data.To exploit the vulnerability, an attacker must know the memory address of where the object was created. The update addresses the vulnerability by changing the way certain functions handle objects in memory, aka Scripting Engine Information Disclosure Vulnerability. This CVE ID is unique from CVE-2019-0658. |
Affected by 95 other vulnerabilities. |
|
VCID-xkm6-uy8d-x3cq
Aliases: CVE-2019-0916 GHSA-7423-5qfm-g648 |
Out-of-bounds Write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0912, CVE-2019-0913, CVE-2019-0914, CVE-2019-0915, CVE-2019-0917, CVE-2019-0922, CVE-2019-0923, CVE-2019-0924, CVE-2019-0925, CVE-2019-0927, CVE-2019-0933, CVE-2019-0937. |
Affected by 67 other vulnerabilities. |
|
VCID-y3z3-emkf-bug3
Aliases: CVE-2017-11916 GHSA-5f5r-65pm-r3wr |
Improper Restriction of Operations within the Bounds of a Memory Buffer ChakraCore allows an attacker to execute arbitrary code in the context of the current user, due to how the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11886, CVE-2017-11889, CVE-2017-11890, CVE-2017-11893, CVE-2017-11894, CVE-2017-11895, CVE-2017-11901, CVE-2017-11903, CVE-2017-11905, CVE-2017-11905, CVE-2017-11907, CVE-2017-11908, CVE-2017-11909, CVE-2017-11910, CVE-2017-11911, CVE-2017-11912, CVE-2017-11913, CVE-2017-11914, CVE-2017-11918, and CVE-2017-11930. |
Affected by 172 other vulnerabilities. |
|
VCID-yabf-1cc1-v7dk
Aliases: CVE-2019-0912 GHSA-w89r-qch4-8jv5 |
Out-of-bounds Write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0913, CVE-2019-0914, CVE-2019-0915, CVE-2019-0916, CVE-2019-0917, CVE-2019-0922, CVE-2019-0923, CVE-2019-0924, CVE-2019-0925, CVE-2019-0927, CVE-2019-0933, CVE-2019-0937. |
Affected by 67 other vulnerabilities. |
|
VCID-ybse-86aa-yqbx
Aliases: CVE-2018-1019 GHSA-prhh-h793-h32r |
Out-of-bounds Write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-0979, CVE-2018-0980, CVE-2018-0990, CVE-2018-0993, CVE-2018-0994, CVE-2018-0995. |
Affected by 125 other vulnerabilities. |
|
VCID-yc6q-h53h-9khy
Aliases: CVE-2018-0943 GHSA-7724-427r-8rvm |
Out-of-bounds Write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8130, CVE-2018-8133, CVE-2018-8145, CVE-2018-8177. |
Affected by 125 other vulnerabilities. Affected by 123 other vulnerabilities. |
|
VCID-yyyb-ew5k-fuay
Aliases: CVE-2018-0995 GHSA-c6mx-gwgr-mfm2 |
Out-of-bounds Write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-0979, CVE-2018-0980, CVE-2018-0990, CVE-2018-0993, CVE-2018-0994, CVE-2018-1019. |
Affected by 125 other vulnerabilities. |
|
VCID-z2u9-jd5w-rkb5
Aliases: CVE-2018-0800 |
Exposure of Sensitive Information to an Unauthorized Actor Microsoft Edge in Microsoft Windows allows an attacker to obtain information to further compromise the user's system, due to how the scripting engine handles objects in memory, aka "Scripting Engine Information Disclosure Vulnerability". This CVE ID is unique from CVE-2018-0767 and CVE-2018-0780. |
Affected by 156 other vulnerabilities. |
|
VCID-z6hg-axpc-1qht
Aliases: CVE-2019-1001 |
Affected by 50 other vulnerabilities. |
|
|
VCID-z6nc-29bh-77h9
Aliases: CVE-2018-8229 GHSA-jv5x-p843-g4qr |
Access of Resource Using Incompatible Type ('Type Confusion') A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8227. |
Affected by 123 other vulnerabilities. Affected by 123 other vulnerabilities. |
|
VCID-z8aj-6xyd-fkfq
Aliases: CVE-2017-11919 |
Exposure of Sensitive Information to an Unauthorized Actor ChakraCore, and Internet Explorer in Microsoft Windows 7 SP1, Windows Server R2 SP1, Windows and Windows RT, Windows Server R2, and Windows Gold, Windows Server, and Microsoft Edge in Windows Gold, and Windows Server allows an attacker to obtain information to further compromise the user's system, due to how the scripting engine handles objects in memory, aka "Scripting Engine Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-11887 and CVE-2017-11906. |
Affected by 172 other vulnerabilities. |
|
VCID-z9gb-6nky-xyha
Aliases: CVE-2019-0993 GHSA-2rfj-2mwp-787v |
Affected by 56 other vulnerabilities. |
|
|
VCID-za9b-6yhc-3kgy
Aliases: CVE-2020-17131 GHSA-qwwg-gc55-qqrv |
Affected by 1 other vulnerability. |
|
|
VCID-zmw1-8bzs-pyae
Aliases: CVE-2020-0827 GHSA-7j34-xq9v-9mqg |
Affected by 13 other vulnerabilities. |
|
|
VCID-zptc-hpne-x7at
Aliases: CVE-2019-0739 |
Out-of-bounds Write A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0752, CVE-2019-0753, CVE-2019-0862. |
Affected by 81 other vulnerabilities. |
|
VCID-zqb9-5v29-xbc6
Aliases: CVE-2018-8279 |
Access of Resource Using Incompatible Type ('Type Confusion') A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8125, CVE-2018-8262, CVE-2018-8274, CVE-2018-8275, CVE-2018-8301. |
Affected by 117 other vulnerabilities. |
|
VCID-ztbp-3phk-zkeg
Aliases: CVE-2017-11808 |
Improper Restriction of Operations within the Bounds of a Memory Buffer ChakraCore and Microsoft Edge in Microsoft Windows Gold, and Windows Server allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11792, CVE-2017-11793, CVE-2017-11796, CVE-2017-11797, CVE-2017-11798, CVE-2017-11799, CVE-2017-11800, CVE-2017-11801, CVE-2017-11802, CVE-2017-11804, CVE-2017-11805, CVE-2017-11806, CVE-2017-11807, CVE-2017-11809, CVE-2017-11810, CVE-2017-11811, CVE-2017-11812, and CVE-2017-11821. |
Affected by 188 other vulnerabilities. |
|
VCID-zzr7-b7ba-8ude
Aliases: CVE-2020-0848 GHSA-5p67-cp9c-hqw4 |
Affected by 13 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||