Skip to content
OpenAdvisories
High · 7.5 CVE-2016-3390 EUVD-2022-3718GHSA-f7p4-fmmh-4p8x

ChakraCore RCE Vulnerability

Published Oct 14, 2016 · Updated Aug 5, 2024 · Assigned by microsoft

Description

The scripting engines in Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, as demonstrated by the Chakra JavaScript engine, aka "Scripting Engine Memory Corruption Vulnerability."

Affected packages

EcosystemPackageAffectedFixedRecord
NuGet Microsoft.ChakraCore < 1.2.1 1.2.1 GHSA-f7p4-fmmh-4p8x

References