Remote Code Execution Vulnerability in Microsoft ChakraCore Scripting Engine
CVE-2020-0826
7.5HIGH
Key Information:
- Vendor
Microsoft
- Status
- Vendor
- CVE Published:
- 12 March 2020
What is CVE-2020-0826?
A vulnerability exists in the way the ChakraCore scripting engine manages memory objects, leading to potential remote code execution. This flaw may allow an attacker to execute arbitrary code in the context of the user running the affected application. Successful exploitation requires that a user be tricked into visiting a specially crafted webpage or opening a malicious document. It’s crucial for users to apply available security updates to mitigate the risk associated with this vulnerability.
Affected Version(s)
ChakraCore = unspecified
Microsoft Edge (EdgeHTML-based) on Windows 10 for 32-bit Systems = unspecified
Microsoft Edge (EdgeHTML-based) on Windows 10 for x64-based Systems = unspecified