Microsoft Corporation Microsoft Chakracore vulnerabilities

CVE-2017-0028 [CRITICAL] CWE-119 CVE-2017-0028: A remote code execution vulnerability exists when Microsoft scripting engine improperly accesses obj A remote code execution vulnerability exists when Microsoft scripting engine improperly accesses objects in memory. The vulnerability could corrupt memory in a way that enables an attacker to execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the curr

CVE-2017-0152 [HIGH] CWE-119 CVE-2017-0152: A remote code execution vulnerability exists in the way affected Microsoft scripting engine render w A remote code execution vulnerability exists in the way affected Microsoft scripting engine render when handling objects in memory in Microsoft browsers. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gai

CVE-2017-0196 [MEDIUM] CWE-200 CVE-2017-0196: An information disclosure vulnerability in Microsoft scripting engine allows remote attackers to obt An information disclosure vulnerability in Microsoft scripting engine allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Microsoft Browser Information Disclosure Vulnerability."