Skip to content
OpenAdvisories
Critical · 9.8 CVE-2017-0223 EUVD-2022-2292GHSA-448h-7hmp-99fg

ChakraCore RCE Vulnerability

Published May 15, 2017 · Updated Aug 5, 2024 · Assigned by microsoft

Description

A remote code execution vulnerability exists in Microsoft Chakra Core in the way JavaScript engines render when handling objects in memory. aka "Scripting Engine Memory Corruption Vulnerability". This vulnerability is unique from CVE-2017-0252.

Affected products

VendorProductAffectedFixed
Microsoft Chakra Core — —

Affected packages

EcosystemPackageAffectedFixedRecord
NuGet Microsoft.ChakraCore < 1.4.4 1.4.4 GHSA-448h-7hmp-99fg

References