Skip to content
OpenAdvisories

Product · Microsoft

ChakraCore

195 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.8
    CVE-2018-8500 EPSS 18%

    ChakraCore RCE Vulnerability

    A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore.

    Microsoft ChakraCore Microsoft.ChakraCore NuGet
  • Critical 9.8
    CVE-2017-11767

    ChakraCore vulnerable to privilege escalation

    ChakraCore allows an attacker to gain the same user rights as the current user, due to the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability".

    Microsoft ChakraCore Microsoft.ChakraCore NuGet
  • Critical 9.8
    CVE-2017-8658 EPSS 20%

    ChakraCore RCE Vulnerability

    A remote code execution vulnerability exists in the way that the Chakra JavaScript engine renders when handling objects in memory, aka "Scripting Engine Memory Corruption Vulnerability".

    Microsoft ChakraCore Microsoft.ChakraCore NuGet