CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Microsoft Scripting Engine Memory Corruption Vulnerability (CVE-2021-34448) Technical Analysis & Hardening Guide
[Affected Scope] Windows client and server environments utilizing Internet Explorer 11 and its legacy scripting engines (Chakra, JScript)
[Impact] Remote Code Execution (RCE) under the context of the current user if a victim visits a specially crafted malicious website or opens a compromised document
[Mitigation] Apply the official Microsoft cumulative security updates immediately and restrict execution permissions for legacy scripting engines
Microsoft Edge Chakra Engine Type Confusion Remote Code Execution Vulnerability (CVE-2016-7201)
[Affected Scope] Microsoft Edge browser and applications utilizing the legacy Chakra JavaScript scripting engine
[Impact] Remote attackers can execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site
[Mitigation] Apply the MS16-129 cumulative security update or transition to the modern Chromium-based Microsoft Edge browser
Microsoft Edge Chakra JavaScript Engine Remote Code Execution and Memory Corruption Vulnerability (CVE-2016-7200)
[Affected Scope] Microsoft Edge browser and systems utilizing the Chakra JavaScript scripting engine
[Impact] Remote attackers can execute arbitrary code or cause a denial of service (memory corruption) via a crafted malicious website
[Mitigation] Apply the MS16-129 cumulative security update or upgrade Microsoft Edge to the latest secure version