CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Windows Scripting Engine JScript9 Remote Code Execution Vulnerability (CVE-2022-41128) Analysis and Mitigation Guide
[Affected Scope] Windows client and server environments utilizing the Windows Scripting Engine (JScript9)
[Impact] Successful exploitation allows remote attackers to execute arbitrary code with the privileges of the active user via crafted web content or documents
[Mitigation] Apply the official Microsoft cumulative security updates immediately and restrict the execution of legacy JScript engines
Internet Explorer JScript and VBScript Engines Remote Code Execution Vulnerability (CVE-2016-0189)
[Affected Scope] Microsoft JScript 5.8 and VBScript 5.7/5.8 engines utilized in Internet Explorer 9 through 11
[Impact] Remote attackers can execute arbitrary code or cause a denial of service (memory corruption) via a specially crafted website
[Mitigation] Apply official Microsoft security updates (MS16-051, MS16-053) or restrict VBScript/JScript execution via registry configurations
Microsoft Internet Explorer 10 & 11 JScript 9 Engine Remote Code Execution Vulnerability (CVE-2015-2419)
[Affected Scope] Microsoft Internet Explorer 10 and 11 browsers utilizing the JScript 9 scripting engine.
[Impact] Remote attackers can execute arbitrary code or trigger a denial of service (DoS) via memory corruption by enticing a user to visit a specially crafted website.
[Mitigation] Apply the official Microsoft MS15-065 security update immediately, and transition legacy environments to modern, secure browsers.