Information Disclosure Vulnerability in Microsoft VBScript and JScript Engines
CVE-2015-6059

Currently unrated

Key Information:

Vendor
Microsoft
Status
Jscript
Vbscript
Internet Explorer
Vendor
CVE Published:
14 October 2015

Summary

The Microsoft VBScript and JScript engines in various versions of Internet Explorer allow attackers to exploit a vulnerability through crafted websites, leading to the potential exposure of sensitive information from the process memory of target systems. This vulnerability could result in unauthorized access to private data, highlighting the importance of securing web applications and user environments.

References

https://docs.microsoft.com/en-us/security-updates/securit...
vendor-advisoryx_refsource_MS
http://www.securitytracker.com/id/1033800
vdb-entryx_refsource_SECTRACK
https://docs.microsoft.com/en-us/security-updates/securit...
vendor-advisoryx_refsource_MS

EPSS Score

48% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.