GHSA-c8qc-62qv-5p2x

ghsaUSosv

Out-of-bounds Write in ChakraCore

view advisory published 2021-07-28Licence: CC-BY-4.0

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0768, CVE-2020-0823, CVE-2020-0825, CVE-2020-0826, CVE-2020-0827, CVE-2020-0829, CVE-2020-0830, CVE-2020-0831, CVE-2020-0832, CVE-2020-0833, CVE-2020-0848.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2020-0828US	high7.5	8.85% (95th)	—	2020-03-12
A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'. This…

references

External citations — patches, advisories, analysis.

https://nvd.nist.gov/vuln/detail/CVE-2020-0828ADVISORY
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0828WEB

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan