An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory in Microsoft Edge, aka 'Scripting Engine Information Disclosure Vulnerability'.
Scores
Version
Score
Vector
Scored by
CVSS 3.0
MEDIUM 6.5
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
NVD · nvd@nist.gov (Primary)
CVSS 2.0
MEDIUM 4.3
AV:N/AC:M/Au:N/C:P/I:N/A:N
NVD · nvd@nist.gov (Primary)
Advisories
GHSA-jhx3-2w5x-x39x — Microsoft.ChakraCore vulnerable to Exposure of Sensitive Information to an Unauthorized Actor
affected Windows Server 2008 R2 for x64-based Systems Service Pack 1 ; affected Windows 8.1 for 32-bit systems ; affected Windows 8.1 for x64-based systems ; affected Windows Server 2012 R2 ; affected Windows RT 8.1 ; affected Windows 10 for 32-bit Systems
