CVE-2020-0823
First published: Thu Mar 12 2020(Updated: )
A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0768, CVE-2020-0825, CVE-2020-0826, CVE-2020-0827, CVE-2020-0828, CVE-2020-0829, CVE-2020-0830, CVE-2020-0831, CVE-2020-0832, CVE-2020-0833, CVE-2020-0848.
Credit: secure@microsoft.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Microsoft Edge | ||
| Microsoft Windows 10 | ||
| Microsoft Windows 10 | =1607 | |
| Microsoft Windows 10 | =1709 | |
| Microsoft Windows 10 | =1803 | |
| Microsoft Windows 10 | =1809 | |
| Microsoft Windows 10 | =1903 | |
| Microsoft Windows 10 | =1909 | |
| Microsoft Windows Server 2016 | ||
| Microsoft Windows Server 2019 | ||
| Microsoft ChakraCore | <1.11.17 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the vulnerability ID for this remote code execution vulnerability?
The vulnerability ID for this remote code execution vulnerability is CVE-2020-0823.
What is the affected software for this vulnerability?
The affected software for this vulnerability includes Microsoft Edge and Microsoft ChakraCore.
What is the severity level of CVE-2020-0823?
The severity level of CVE-2020-0823 is high, with a score of 7.5 out of 10.
How does this vulnerability impact the ChakraCore scripting engine?
This vulnerability allows remote code execution in the ChakraCore scripting engine by exploiting memory corruption in how the engine handles objects.
How can I fix this vulnerability?
To fix this vulnerability, it is recommended to apply the security updates provided by Microsoft. Please refer to the reference link for more information.
- agent/type
- agent/first-publish-date
- agent/softwarecombine
- agent/last-modified-date
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/severity
- agent/author
- agent/weakness
- agent/references
- agent/remedy
- agent/tags
- agent/description
- agent/event
- collector/mitre-cve
- source/MITRE
- vendor/microsoft
- canonical/microsoft edge
- canonical/microsoft windows 10
- version/microsoft windows 10/1607
- version/microsoft windows 10/1709
- version/microsoft windows 10/1803
- version/microsoft windows 10/1809
- version/microsoft windows 10/1903
- version/microsoft windows 10/1909
- canonical/microsoft windows server 2016
- canonical/microsoft windows server 2019
- canonical/microsoft chakracore