CVE-2020-0969: Buffer Overflow
Published Apr 15, 2020
·Updated
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based), aka 'Chakra Scripting Engine Memory Corruption Vulnerability'.
Affected Software
12 affected componentsFixes available
nuget/Microsoft.ChakraCore<1.11.18
1.11.18
Microsoft Edge
Microsoft Windows 10
Microsoft Windows 10=1607
Microsoft Windows 10=1709
Microsoft Windows 10=1803
Microsoft Windows 10=1809
Microsoft Windows 10=1903
Microsoft Windows 10=1909
Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft ChakraCore<1.11.18
Remediation
Event History
Apr 15, 2020
CVE Published
via MITRE·03:13 PM
Data Sourced
via MITRE·03:13 PM
DescriptionWeakness
May 24, 2022
Advisory Published
05:14 PM
Frequently Asked Questions
1
What is CVE-2020-0969?
CVE-2020-0969 is a remote code execution vulnerability in the Chakra scripting engine in Microsoft Edge.
2
What is the severity of CVE-2020-0969?
CVE-2020-0969 has a severity rating of 7.5 (high).
3
How does CVE-2020-0969 affect Microsoft Edge?
CVE-2020-0969 allows remote attackers to execute arbitrary code in the context of the current user.
4
How can I fix CVE-2020-0969?
To fix CVE-2020-0969, update to Microsoft ChakraCore version 1.11.18 or later.
5
Where can I find more information about CVE-2020-0969?
You can find more information about CVE-2020-0969 on the NIST NVD and Microsoft Security Guidance websites.