Skip to main content
← All vulnerabilities
CVE-2020-0812GHSA-G67X-MGRV-M3GV

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-b

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 1.11.17
None on Exploit-DB, Metasploit or GitHub

Summary

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based)L, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0811.

Timeline

  1. CVE published
  2. Record last updated

Affected versions

  • Microsoft ChakraCore

    Version range not reported

  • Microsoft Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for 32-bit Systems

    Version range not reported

  • Microsoft Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for x64-based Systems

    Version range not reported

  • Microsoft Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for ARM64-based Systems

    Version range not reported

  • Microsoft Microsoft Edge (EdgeHTML-based) on Windows Server 2019

    Version range not reported

  • Microsoft Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1909 for 32-bit Systems

    Version range not reported

  • Microsoft Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1909 for x64-based Systems

    Version range not reported

  • Microsoft Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1909 for ARM64-based Systems

    Version range not reported

  • Microsoft Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1903 for 32-bit Systems

    Version range not reported

  • Microsoft Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1903 for x64-based Systems

    Version range not reported

  • Microsoft Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1903 for ARM64-based Systems

    Version range not reported

  • Microsoft.ChakraCoreNuGet

    fixed in 1.11.17

References 1

portal.msrc.microsoft.com