CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2022-11-09
Windows Scripting Engine JScript9 Remote Code Execution Vulnerability (CVE-2022-41128) Analysis and Mitigation Guide
[Affected Scope] Windows client and server environments utilizing the Windows Scripting Engine (JScript9)
[Impact] Successful exploitation allows remote attackers to execute arbitrary code with the privileges of the active user via crafted web content or documents
[Mitigation] Apply the official Microsoft cumulative security updates immediately and restrict the execution of legacy JScript engines