ZeroHour

CVE-2020-0970

CVSS 3.1
7.5 high
EPSS
13%p96
Published
()
Modified
Description

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0968.

Vendors
microsoft
Products
chakracore, edge
Weakness
CWE-787
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

In the news