{"id":"CVE-2020-1073","published":"2020-06-09T19:43:15Z","modified":"2024-08-04T06:25:00Z","title":"A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in…","vendor":"Microsoft","product":"ChakraCore","tier":"tail","description":{"text":"A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'.","provenance":"source","from":"CVE.org"},"cvss":null,"epss":{"score":0.08854,"percentile":0.95205,"provenance":"source"},"cwes":[],"references":[{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1073","tags":["x_refsource_MISC"]}],"priority":{"score":19.0,"factors":[{"name":"EPSS percentile","points":19.04}]},"vendorSlug":"microsoft","affected":[{"ecosystem":"NuGet","package":"Microsoft.ChakraCore","vulnerableRanges":["<1.11.20"],"patched":["1.11.20"],"from":["GHSA-g3m9-qrfj-xw4g"],"provenance":"source"}],"euvd":{"id":"EUVD-2022-3875","exploited":false,"provenance":"source"},"lineage":{"packageHistory":[{"cve":"CVE-2020-0970","published":"2020-04-15","fixed":"1.11.18","kev":false},{"cve":"CVE-2020-1037","published":"2020-05-21","fixed":"1.11.19","kev":false,"link":{"from":"CVE-2020-1037","to":"CVE-2020-1073","relation":"successor","confidence":"low","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"NuGet:Microsoft.ChakraCore","fromFixed":"1.11.19","toFixed":"1.11.20","daysApart":19}]}},{"cve":"CVE-2020-1065","published":"2020-05-21","fixed":"1.11.19","kev":false},{"cve":"CVE-2020-1073","published":"2020-06-09","fixed":"1.11.20","kev":false},{"cve":"CVE-2020-1057","published":"2020-09-11","fixed":"1.11.22","kev":false,"link":{"from":"CVE-2020-1073","to":"CVE-2020-1057","relation":"successor","confidence":"low","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"NuGet:Microsoft.ChakraCore","fromFixed":"1.11.20","toFixed":"1.11.22","daysApart":94}]}},{"cve":"CVE-2020-1172","published":"2020-09-11","fixed":"1.11.22","kev":false,"link":{"from":"CVE-2020-1073","to":"CVE-2020-1172","relation":"successor","confidence":"low","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"NuGet:Microsoft.ChakraCore","fromFixed":"1.11.20","toFixed":"1.11.22","daysApart":94}]}},{"cve":"CVE-2020-1180","published":"2020-09-11","fixed":"1.11.22","kev":false,"link":{"from":"CVE-2020-1073","to":"CVE-2020-1180","relation":"successor","confidence":"low","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"NuGet:Microsoft.ChakraCore","fromFixed":"1.11.20","toFixed":"1.11.22","daysApart":94}]}}],"package":"NuGet:Microsoft.ChakraCore"}}