vulnerability
Microsoft Windows: CVE-2020-1172: Scripting Engine Memory Corruption Vulnerability
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 8 | (AV:N/AC:H/Au:N/C:C/I:C/A:C) | Sep 8, 2020 | Sep 8, 2020 | Sep 5, 2025 |
Severity
8
CVSS
(AV:N/AC:H/Au:N/C:C/I:C/A:C)
Published
Sep 8, 2020
Added
Sep 8, 2020
Modified
Sep 5, 2025
Description
A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-1057, CVE-2020-1180.
Solutions
microsoft-windows-windows_10-1507-kb4577049microsoft-windows-windows_10-1607-kb4577015microsoft-windows-windows_10-1709-kb4577041microsoft-windows-windows_10-1803-kb4577032microsoft-windows-windows_10-1809-kb4570333microsoft-windows-windows_10-1903-kb4574727microsoft-windows-windows_10-1909-kb4574727microsoft-windows-windows_10-2004-kb4571756microsoft-windows-windows_server_2016-1607-kb4577015microsoft-windows-windows_server_2019-1809-kb4570333msft-kb4571756-5b919d47-fce4-48a0-8d72-b3fc27b78f6emsft-kb4574727-0eef97a6-edd8-47e9-b6c7-d2f66afcc6a1msft-kb4574727-48c91ab8-33a2-4dc3-96b2-9d75dc6c1f78
References
- CVE-2020-1172
- https://attackerkb.com/topics/CVE-2020-1172
- CWE-787
- URL-https://support.microsoft.com/help/4570333
- URL-https://support.microsoft.com/help/4571756
- URL-https://support.microsoft.com/help/4574727
- URL-https://support.microsoft.com/help/4577015
- URL-https://support.microsoft.com/help/4577032
- URL-https://support.microsoft.com/help/4577041
- URL-https://support.microsoft.com/help/4577049
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.