Skip to content
OpenAdvisories
High · 7.5 CVE-2016-3296 EUVD-2022-2630GHSA-5ppx-g65v-4vfv

ChakraCore RCE Vulnerability

Published Aug 9, 2016 · Updated Aug 5, 2024 · Assigned by microsoft

Description

The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability."

Affected packages

EcosystemPackageAffectedFixedRecord
NuGet Microsoft.ChakraCore <= 1.2.0 — GHSA-5ppx-g65v-4vfv

References