CVE-2020-0831: 
C# vulnerability analysis and mitigation

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, identified as CVE-2020-0831. This vulnerability, also known as 'Scripting Engine Memory Corruption Vulnerability', was disclosed in March 2020 and affects Microsoft's ChakraCore scripting engine (NVD, MITRE).

The vulnerability has been assigned a CVSS v3.1 base score of 7.5 (HIGH) with the following vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H. The vulnerability is classified as an Out-of-bounds Write (CWE-787) issue, which could allow an attacker to execute arbitrary code when the scripting engine improperly handles objects in memory (NVD).

If successfully exploited, this vulnerability could allow an attacker to execute arbitrary code in the context of the current user. Users with administrative privileges could be more severely impacted than those with restricted access. The vulnerability could lead to a complete compromise of the affected system's confidentiality, integrity, and availability (NVD).

Microsoft has released security updates to address this vulnerability in affected versions of ChakraCore up to (excluding) version 1.11.17. Users are advised to apply the available security updates to mitigate this vulnerability (NVD).