Vulnerabilities > Microsoft > Chakracore > Medium

DATE CVE VULNERABILITY TITLE RISK
2020-09-11 CVE-2020-1057 Out-of-bounds Write vulnerability in Microsoft Chakracore and Edge
<p>A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory.
network
high complexity
microsoft CWE-787
4.2
2020-09-11 CVE-2020-0878 Out-of-bounds Write vulnerability in Microsoft Chakracore, Edge and Internet Explorer
<p>A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory.
network
high complexity
microsoft CWE-787
4.2
2019-06-12 CVE-2019-1023 Information Exposure vulnerability in Microsoft Chakracore and Edge
An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory in Microsoft Edge, aka 'Scripting Engine Information Disclosure Vulnerability'.
network
low complexity
microsoft CWE-200
6.5
2019-06-12 CVE-2019-0990 Information Exposure vulnerability in Microsoft Chakracore and Edge
An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory in Microsoft Edge, aka 'Scripting Engine Information Disclosure Vulnerability'.
network
low complexity
microsoft CWE-200
6.5
2019-04-09 CVE-2019-0746 Unspecified vulnerability in Microsoft Chakracore, Edge and Internet Explorer
An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory in Microsoft Edge, aka 'Scripting Engine Information Disclosure Vulnerability'.
network
low complexity
microsoft
6.5
2019-03-05 CVE-2019-0658 Unspecified vulnerability in Microsoft Chakracore and Edge
An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory in Microsoft Edge, aka 'Scripting Engine Information Disclosure Vulnerability'.
network
low complexity
microsoft
6.5
2018-09-13 CVE-2018-8452 Information Exposure vulnerability in Microsoft Chakracore, Edge and Internet Explorer
An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory in Microsoft browsers, aka "Scripting Engine Information Disclosure Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge.
network
low complexity
microsoft CWE-200
4.3
2018-09-13 CVE-2018-8315 Information Exposure vulnerability in Microsoft Chakracore, Edge and Internet Explorer
An information disclosure vulnerability exists when the browser scripting engine improperly handle object types, aka "Microsoft Scripting Engine Information Disclosure Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge, Internet Explorer 10.
network
high complexity
microsoft CWE-200
4.2
2018-01-04 CVE-2018-0800 Information Exposure vulnerability in Microsoft Chakracore and Edge
Microsoft Edge in Microsoft Windows 10 1709 allows an attacker to obtain information to further compromise the user's system, due to how the scripting engine handles objects in memory, aka "Scripting Engine Information Disclosure Vulnerability".
network
high complexity
microsoft CWE-200
5.3
2018-01-04 CVE-2018-0780 Out-of-bounds Read vulnerability in Microsoft Chakracore and Edge
Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to obtain information to further compromise the user's system, due to how the scripting engine handles objects in memory, aka "Scripting Engine Information Disclosure Vulnerability".
network
high complexity
microsoft CWE-125
5.3