Product · Microsoft

ChakraCore, Microsoft Edge

40 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

15 results · Clear filters · Feed

High 7.5

CVE-2018-0934 Public exploit EPSS 66%

ChakraCore RCE Vulnerability

ChakraCore and Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the Chakra scripting engine handles objects in memory, aka "Chakra Scripting Engine Memory Corruption Vulnerability". This CVE I…

Microsoft ChakraCore, Microsoft Edge Microsoft.ChakraCore Browsers NuGet

Mar 14, 2018
High 7.5

CVE-2018-0933 Public exploit EPSS 66%

ChakraCore RCE Vulnerability

ChakraCore and Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the Chakra scripting engine handles objects in memory, aka "Chakra Scripting Engine Memory Corruption Vulnerability". This CVE I…

Microsoft ChakraCore, Microsoft Edge Microsoft.ChakraCore Browsers NuGet

Mar 14, 2018
Unscored —

CVE-2017-11918 Public exploit EPSS 63%

ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to…

Microsoft ChakraCore, Microsoft Edge Browsers

Dec 12, 2017
High 7.5

CVE-2017-11911 Public exploit EPSS 65%

ChakraCore RCE Vulnerability

ChakraCore and Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulne…

Microsoft ChakraCore, Microsoft Edge Microsoft.ChakraCore Browsers NuGet

Dec 12, 2017
High 7.5

CVE-2017-11909 Public exploit EPSS 65%

ChakraCore vulnerable to remote code execution

ChakraCore and Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulne…

Microsoft ChakraCore, Microsoft Edge Microsoft.ChakraCore Browsers NuGet

Dec 12, 2017
High 7.5

CVE-2017-11914 Public exploit EPSS 63%

ChakraCore vulnerable to privilege escalation due to exposure from scriptFunction

ChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption…

Microsoft ChakraCore, Microsoft Edge Microsoft.ChakraCore Browsers NuGet

Dec 12, 2017
High 7.5

CVE-2017-11893 Public exploit EPSS 68%

ChakraCore vulnerable to remote code execution

ChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memor…

Microsoft ChakraCore, Microsoft Edge Microsoft.ChakraCore Browsers NuGet

Dec 12, 2017
High 7.5

CVE-2017-11870 Public exploit EPSS 60%

Chakra Core vulnerable to privilege escalation when writing to JavaScript null scope objects

ChakraCore and Microsoft Edge in Windows 10 1703, 1709, and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vu…

Microsoft ChakraCore, Microsoft Edge Microsoft.ChakraCore Browsers NuGet

Nov 15, 2017
Unscored —

CVE-2017-11841 Public exploit EPSS 60%

ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, versi…

Microsoft ChakraCore, Microsoft Edge Browsers

Nov 15, 2017
Unscored —

CVE-2017-11861 Public exploit EPSS 64%

Microsoft Edge in Windows 10 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker …

Microsoft ChakraCore, Microsoft Edge Browsers

Nov 15, 2017
Unscored —

CVE-2017-11873 Public exploit EPSS 70%

ChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 170…

Microsoft ChakraCore, Microsoft Edge Browsers

Nov 15, 2017
Unscored —

CVE-2017-11840 Public exploit EPSS 60%

ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, versi…

Microsoft ChakraCore, Microsoft Edge Browsers

Nov 15, 2017
Unscored —

CVE-2017-11802 Public exploit EPSS 69%

ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacke…

Microsoft ChakraCore, Microsoft Edge Browsers

Oct 13, 2017
Unscored —

CVE-2017-11799 Public exploit EPSS 64%

ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacke…

Microsoft ChakraCore, Microsoft Edge Browsers

Oct 13, 2017
Unscored —

CVE-2017-11809 Public exploit EPSS 68%

ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacke…

Microsoft ChakraCore, Microsoft Edge Browsers

Oct 13, 2017