Microsoft Scripting Engine vulnerabilities

Heap-based buffer overflow in Microsoft Scripting Engine allows an authorized attacker to elevate privileges locally. The issue stems from improper memory management.

A remote code execution vulnerability exists when Microsoft scripting engine improperly accesses objects in memory. This could corrupt memory in a way that enables an attacker to execute arbitrary code in the context of the current user.