CVE-2020-1037

EUVD-2022-3261
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based), aka 'Chakra Scripting Engine Memory Corruption Vulnerability'.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 HIGH
NETWORK
HIGH
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 88%
Affected Products (NVD)
VendorProductVersion
microsoftedge
-
microsoftchakracore
-
𝑥
= Vulnerable software versions
Windows Releases
Platform
Version
Windows 10
(x64, x86)
KB4556826
1607 (x64, x86)
KB4556813
1709 (arm64, x64, x86)
KB4556812
1803 (arm64, x64, x86)
KB4556807
1809 (arm64, x64, x86)
KB4551853
1903 (arm64, x64, x86)
KB4556799
1909 (arm64, x64, x86)
KB4556799
Windows Server 2016
Standard
KB4556813
Windows Server 2019
Standard
KB4551853
Common Weakness Enumeration
References
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1037
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1037