CVE-2020-0825

high · 7.5

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0768, CVE-2020-0823, CVE-2020-0826, CVE-2020-0827, CVE-2020-0828, CVE-2020-0829, CVE-2020-0830, CVE-2020-0831, CVE-2020-0832, CVE-2020-0833, CVE-2020-0848.

7.5

CVSS

13.3%

EPSS (exploit prob.)

96th

EPSS percentile

2020-03-12

Published

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Weaknesses

CWE-787

Affected products

Vendor	Product	Affected versions
microsoft	edge	all versions
microsoft	windows_10	1809
microsoft	windows_10	1903
microsoft	windows_10	1909
microsoft	windows_server_2019	all versions
microsoft	chakracore	< 1.11.17

Check a specific version with /api/v1/cve/match.

References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0825
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0825

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2020-0825