CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2024-08-13
Microsoft Windows Scripting Engine Memory Corruption Vulnerability (CVE-2024-38178) Technical Advisory
[Affected Scope] Windows 10, 11, and Windows Server environments utilizing the legacy JScript9 engine, particularly with Internet Explorer mode enabled
[Impact] Remote Code Execution (RCE) and full system compromise via specially crafted malicious web pages
[Mitigation] Apply the Microsoft August 2024 security updates immediately and disable legacy IE scripting engines where applicable