Skip to content
OpenAdvisories
High · 7.5 CVE-2016-7242 EUVD-2022-4695GHSA-p6f4-h6w5-9jmc

ChakraCore RCE Vulnerability

Published Nov 10, 2016 · Updated Aug 6, 2024 · Assigned by microsoft

Description

The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-7200, CVE-2016-7201, CVE-2016-7202, CVE-2016-7203, CVE-2016-7208, CVE-2016-7240, and CVE-2016-7243.

Affected packages

EcosystemPackageAffectedFixedRecord
NuGet Microsoft.ChakraCore < 1.2.2 1.2.2 GHSA-p6f4-h6w5-9jmc

References