CVE-2020-0811: High severity chakracore vulnerability

Published Mar 12, 2020

Updated

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based)L, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0812.

Affected Software

8 affected components

Microsoft ChakraCore

Microsoft Edge

Microsoft Windows 10=1709

Microsoft Windows 10=1803

Microsoft Windows 10=1809

Microsoft Windows 10=1903

Microsoft Windows 10=1909

Microsoft Windows Server 2019

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0811

Event History

Mar 12, 2020

CVE Published

via MITRE·03:48 PM

Data Sourced

via MITRE·03:48 PM

DescriptionWeakness

Frequently Asked Questions

What is CVE-2020-0811?

CVE-2020-0811 is a remote code execution vulnerability in the Chakra scripting engine in Microsoft Edge and ChakraCore.

What is the severity of CVE-2020-0811?

CVE-2020-0811 has a severity rating of 7.5 (high).

How does CVE-2020-0811 affect Microsoft Edge?

CVE-2020-0811 affects Microsoft Edge, specifically the HTML-based version.

How does CVE-2020-0811 affect ChakraCore?

CVE-2020-0811 affects ChakraCore, the open-source JavaScript engine used by Microsoft Edge.

Where can I find more information about CVE-2020-0811?

More information about CVE-2020-0811 can be found at the Microsoft Security Guidance Advisory page: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0811.