GHSA-758c-g2ff-9444

ghsaUSosv

Out-of-bounds write in Microsoft.ChakraCore

view advisory published 2021-03-29Licence: CC-BY-4.0

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1131, CVE-2019-1139, CVE-2019-1141, CVE-2019-1195, CVE-2019-1196, CVE-2019-1197.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2019-1140US	high7.6	3.82% (90th)	—	2019-08-14
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based). The vulnerability could corrupt m…

references

External citations — patches, advisories, analysis.

https://nvd.nist.gov/vuln/detail/CVE-2019-1140ADVISORY
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1140WEB

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan