Description
An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory in Microsoft Edge, aka 'Scripting Engine Information Disclosure Vulnerability'.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Microsoft | Internet Explorer 9 | Windows Server 2008 for 32-bit Systems Service Pack 2, Windows Server 2008 for x64-based Systems Service Pack 2 | — |
| Microsoft | Internet Explorer 11 | Windows 7 for 32-bit Systems Service Pack 1, Windows 7 for x64-based Systems Service Pack 1 | — |
| Microsoft | Internet Explorer 10 | Windows Server 2008 R2 for x64-based Systems Service Pack 1, Windows 8.1 for 32-bit systems, Windows 8.1 for x64-based systems, Windows Server 2012 R2, Windows RT 8.1, Windows 10 for 32-bit Systems, Windows 10 for x64-based Systems, Windows Server 2016, Windows 10 Version 1607 for 32-bit Systems, W… | — |
| Microsoft | Microsoft Edge | Windows Server 2012 | — |
| Microsoft | ChakraCore | Windows 10 for 32-bit Systems | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| NuGet | Microsoft.ChakraCore | < 1.11.7 | 1.11.7 | GHSA-jhx3-2w5x-x39x |