CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Microsoft Windows Scripting Engine Memory Corruption Vulnerability (CVE-2024-38178) Technical Advisory
[Affected Scope] Windows 10, 11, and Windows Server environments utilizing the legacy JScript9 engine, particularly with Internet Explorer mode enabled
[Impact] Remote Code Execution (RCE) and full system compromise via specially crafted malicious web pages
[Mitigation] Apply the Microsoft August 2024 security updates immediately and disable legacy IE scripting engines where applicable
Windows Scripting Engine JScript9 Remote Code Execution Vulnerability (CVE-2022-41128) Analysis and Mitigation Guide
[Affected Scope] Windows client and server environments utilizing the Windows Scripting Engine (JScript9)
[Impact] Successful exploitation allows remote attackers to execute arbitrary code with the privileges of the active user via crafted web content or documents
[Mitigation] Apply the official Microsoft cumulative security updates immediately and restrict the execution of legacy JScript engines