Lucene search
GoogleOSV:GHSA-P94C-R74J-43QGHistoryMay 14, 2022 - 2:23 a.m.
ChakraCore RCE Vulnerability
2022-05-1402:23:18
Google
osv.dev
6
0.269 Low
EPSS
Percentile
96.8%
The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka “Scripting Engine Memory Corruption Vulnerability,” a different vulnerability than CVE-2016-3377.
| CPE | Name | Operator | Version |
|---|---|---|---|
| microsoft.chakracore | eq | 1.2.0 |
References
docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-105
github.com/chakra-core/ChakraCore
github.com/chakra-core/ChakraCore/commit/24c4d7df8199b27d360323ce3be1d7959fd918eb
nvd.nist.gov/vuln/detail/CVE-2016-3350
web.archive.org/web/20210123044830/www.securitytracker.com/id/1036789
web.archive.org/web/20210123164600/www.securityfocus.com/bid/92793
Related
cvelist
cvelist
CVE-2016-3377
2016-09-14 10:00:00
CVE-2016-3350
2016-09-14 10:00:00
nvd
nvd
CVE-2016-3350
2016-09-14 10:59:23
CVE-2016-3377
2016-09-14 10:59:51
prion
prion
Memory corruption
2016-09-14 10:59:00
Memory corruption
2016-09-14 10:59:00
github
github
ChakraCore RCE Vulnerability
2022-05-14 02:23:18
ChakraCore RCE Vulnerability
2022-05-14 02:23:14
cve
cve
CVE-2016-3377
2016-09-14 10:59:51
CVE-2016-3350
2016-09-14 10:59:23
osv
osv
ChakraCore RCE Vulnerability
2022-05-14 02:23:14
mscve
mscve
Scripting Engine Memory Corruption Vulnerability
2016-09-13 07:00:00
Scripting Engine Memory Corruption Vulnerability
2016-09-13 07:00:00
symantec
symantec
zdi
zdi
checkpoint_advisories
checkpoint_advisories
Microsoft Edge Memory Corruption (MS16-105: CVE-2016-3377)
2016-09-13 00:00:00
mskb
mskb
MS16-105: Cumulative security update for Microsoft Edge: September 13, 2016
2016-09-13 00:00:00
Cumulative update for Windows 10 Version 1607: September 13, 2016
2016-09-13 07:00:00
Cumulative update for Windows 10 Version 1511: September 13, 2016
2016-09-13 07:00:00
nessus
nessus
MS16-105: Cumulative Security Update for Microsoft Edge (3183043)
2016-09-13 00:00:00
openvas
openvas
Microsoft Edge Multiple Vulnerabities (3183043)
2016-09-14 00:00:00
kaspersky
kaspersky
KLA10875 Multiple vulnerabilities in Microsoft Edge and Internet Explorer
2016-09-13 00:00:00