Skip to content
OpenAdvisories
High · 8.8 CVE-2016-0024 EUVD-2022-3910GHSA-g77f-7wm9-rh6p

ChakraCore RCE Vulnerability

Published Jan 13, 2016 · Updated Aug 5, 2024 · Assigned by microsoft

Description

The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code via unspecified vectors, aka "Scripting Engine Memory Corruption Vulnerability."

Affected packages

EcosystemPackageAffectedFixedRecord
NuGet Microsoft.ChakraCore < 1.2.0 1.2.0 GHSA-g77f-7wm9-rh6p

References