Remote Code Execution Flaw in Microsoft Edge's Chakra Scripting Engine
CVE-2020-0812
7.5HIGH
Key Information:
- Vendor
- Microsoft
- Status
- Vendor
- CVE Published:
- 12 March 2020
Summary
The vulnerability arises from the Chakra scripting engine's improper handling of objects in memory, which could potentially allow an attacker to execute arbitrary code on the target system. By exploiting this flaw, malicious actors can gain elevated privileges and execute harmful commands, compromising system integrity and data security. Users are encouraged to update their systems to mitigate this risk effectively.
Affected Version(s)
ChakraCore = unspecified
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for 32-bit Systems = unspecified
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for ARM64-based Systems = unspecified
References
CVSS V3.1
Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved