CVE-2020-1057: Scripting Engine Memory Corruption Vulnerability
First published: Fri Sep 11 2020(Updated: )
<p>A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user.</p> <p>If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p> <p>The security update addresses the vulnerability by modifying how the ChakraCore scripting engine handles objects in memory.</p>
Credit: secure@microsoft.com secure@microsoft.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| Any of | ||
| =1803 | ||
| =1809 | ||
| =1903 | ||
| =1909 | ||
| =2004 | ||
| <1.11.22 | ||
| Microsoft Edge | ||
| Microsoft Windows 10 | =1803 | |
| Microsoft Windows 10 | =1809 | |
| Microsoft Windows 10 | =1903 | |
| Microsoft Windows 10 | =1909 | |
| Microsoft Windows 10 | =2004 | |
| Microsoft Windows Server 2016 | ||
| Microsoft Windows Server 2019 | ||
| Microsoft ChakraCore | <1.11.22 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is CVE-2020-1057?
CVE-2020-1057 is a remote code execution vulnerability in the ChakraCore scripting engine.
How does CVE-2020-1057 work?
CVE-2020-1057 allows an attacker to execute arbitrary code by exploiting a memory corruption vulnerability in ChakraCore.
Which software is affected by CVE-2020-1057?
Microsoft Edge and Microsoft ChakraCore are affected by CVE-2020-1057.
What is the severity of CVE-2020-1057?
CVE-2020-1057 has a severity rating of 8.1, which is considered critical.
How can I fix CVE-2020-1057?
To fix CVE-2020-1057, update to the latest version of Microsoft Edge or ChakraCore that includes the security patch.
- agent/type
- agent/last-modified-date
- agent/first-publish-date
- agent/author
- agent/softwarecombine
- agent/description
- agent/weakness
- agent/remedy
- agent/references
- agent/title
- agent/severity
- agent/event
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- collector/nvd-index
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/microsoft
- canonical/microsoft edge
- canonical/microsoft windows 10
- version/microsoft windows 10/1803
- version/microsoft windows 10/1809
- version/microsoft windows 10/1903
- version/microsoft windows 10/1909
- version/microsoft windows 10/2004
- canonical/microsoft windows server 2016
- canonical/microsoft windows server 2019
- canonical/microsoft chakracore