7.5
CVSSv3

CVE-2018-0769

Published: 04/01/2018 Updated: 24/08/2020
CVSS v2 Base Score: 7.6 | Impact Score: 10 | Exploitability Score: 4.9
CVSS v3 Base Score: 7.5 | Impact Score: 5.9 | Exploitability Score: 1.6
VMScore: 765
Vector: AV:N/AC:H/Au:N/C:C/I:C/A:C

Vulnerability Summary

Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an malicious user to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0758, CVE-2018-0762, CVE-2018-0768, CVE-2018-0770, CVE-2018-0772, CVE-2018-0773, CVE-2018-0774, CVE-2018-0775, CVE-2018-0776, CVE-2018-0777, CVE-2018-0778, and CVE-2018-0781.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

microsoft edge -

microsoft chakracore

Exploits

/* Let's start with comments in the "GlobOpt::TrackIntSpecializedAddSubConstant" method // Track bounds for add or sub with a constant For instance, consider (b = a + 2) The value of 'b' should track // that it is equal to (the value of 'a') + 2 That part has been done above Similarly, the value of 'a' should ...
Microsoft Edge Chakra JIT suffers from an out-of-bounds write vulnerability ...