CVE-2020-0812

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based)L, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0811.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

Vendor	Product	Versions
Microsoft	ChakraCore	unspecified
Microsoft	Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for 32-bit Systems	unspecified
Microsoft	Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for x64-based Systems	unspecified
Microsoft	Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for ARM64-based Systems	unspecified
Microsoft	Microsoft Edge (EdgeHTML-based) on Windows Server 2019	unspecified
Microsoft	Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1909 for 32-bit Systems	unspecified
Microsoft	Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1909 for x64-based Systems	unspecified
Microsoft	Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1909 for ARM64-based Systems	unspecified
Microsoft	Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1903 for 32-bit Systems	unspecified
Microsoft	Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1903 for x64-based Systems	unspecified
Microsoft	Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1903 for ARM64-based Systems	unspecified

References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0812Patch, Vendor Advisory
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0812Patch, Vendor Advisory

Timeline

Published: Mar 12, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-08137.5An information disclosure vulnerability exists when Chakra improperly discloses the contents of its memory, which could provide an attacker CVE-2020-08147.8An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certain filesystem operatio CVE-2020-08157.5An elevation of privilege vulnerability exists when Azure DevOps Server and Team Foundation Services improperly handle pipeline job tokens, CVE-2020-08168.8A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka 'Microsoft Edge Memory Corruptio CVE-2020-08197.8An elevation of privilege vulnerability exists when the Windows Device Setup Manager improperly handles file operations, aka 'Windows Device CVE-2020-08205.5An information disclosure vulnerability exists when Media Foundation improperly handles objects in memory, aka 'Media Foundation Information CVE-2020-08215.5An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information CVE-2020-08227.8An elevation of privilege vulnerability exists when the Windows Language Pack Installer improperly handles file operations, aka 'Windows Lan CVE-2020-08237.5A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engin CVE-2020-08247.5A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka 'Internet Explorer Memory Cor CVE-2020-08257.5A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engin CVE-2020-08267.5A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engin