Skip to content
OpenAdvisories

Archive

12 December 2017

Vulnerabilities first published on this day (UTC), newest first.

5 results · Clear filters · Feed

  • High 7.5
    CVE-2017-11911 Public exploit EPSS 65%

    ChakraCore RCE Vulnerability

    ChakraCore and Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulne…

  • High 7.5
    CVE-2017-11909 Public exploit EPSS 65%

    ChakraCore vulnerable to remote code execution

    ChakraCore and Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulne…

  • High 7.5
    CVE-2017-11914 Public exploit EPSS 63%

    ChakraCore vulnerable to privilege escalation due to exposure from scriptFunction

    ChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption…

  • High 7.5
    CVE-2017-11893 Public exploit EPSS 68%

    ChakraCore vulnerable to remote code execution

    ChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memor…

  • High 8.1
    CVE-2017-17562 Exploited Public exploit Scanner template EPSS 97%

    Embedthis GoAhead before 3.6.5 allows remote code execution if CGI is enabled and a CGI program is dynamically linked. …

    KEV Dec 10, 2021