CVE-2020-0813 — Sensitive Information Exposure in Microsoft Chakracore
5 documents5 sources
Severity
7.5HIGHNVD
EPSS
9.2%
top 7.28%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedMar 12
Latest updateMay 24
Description
An information disclosure vulnerability exists when Chakra improperly discloses the contents of its memory, which could provide an attacker with information to further compromise the user’s computer or data.To exploit the vulnerability, an attacker must know the memory address of where the object was created.The update addresses the vulnerability by changing the way certain functions handle objects in memory., aka 'Scripting Engine Information Disclosure Vulnerability'.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NExploitability: 3.9 | Impact: 3.6
Affected Packages17 packages
Patches
🔴Vulnerability Details
3CVEList▶
CVE-2020-0813: An information disclosure vulnerability exists when Chakra improperly discloses the contents of its memory, which could provide an attacker with infor↗2020-03-12