Back to feed
EUVD-2021-0709 · Published Mar 29, 2021
Out-of-bounds write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1131, CVE-2019-1139, CVE-2019-1140, CVE-2019-1141, CVE-2019-1195, CVE-2019-1196.
Technologies
Microsoft Windows 10Microsoft Windows Server 2019Microsoft EdgeMicrosoft Windows Server 2016Microsoft.Chakracore Microsoft.Chakracore
Weaknesses
CWE-787
CVSS scores
- v3.07.5
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Initial Access
References
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1197
- https://nvd.nist.gov/vuln/detail/CVE-2019-1197
- https://github.com/chakra-core/ChakraCore/commit/6b1250b6ffea7006226dd937e52cf5b353fcfc15
- https://github.com/chakra-core/ChakraCore/commit/bf52b6cfa96d6395046d0aaf87396cd7ca13f6cb
Potentially impacted assets
See if this affects your attack surface
