Skip to content
OpenAdvisories
High · 8.8 CVE-2016-3199 EUVD-2022-5349GHSA-vfjw-crcq-q92v

ChakraCore RCE Vulnerability

Published Jun 16, 2016 · Updated Aug 5, 2024 · Assigned by microsoft

Description

The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-3214.

Affected packages

EcosystemPackageAffectedFixedRecord
NuGet Microsoft.ChakraCore < 1.2.0.0 1.2.0.0 GHSA-vfjw-crcq-q92v

References