Skip to content
OpenAdvisories
High · 7.5 CVE-2017-0224 EUVD-2022-2750GHSA-68cp-h96v-gg3x

ChakraCore RCE Vulnerability

Published May 12, 2017 · Updated Aug 5, 2024 · Assigned by microsoft

Description

A remote code execution vulnerability exists in the way JavaScript engines render when handling objects in memory in Microsoft Edge, aka "Scripting Engine Memory Corruption Vulnerability." This CVE ID is unique from CVE-2017-0228, CVE-2017-0229, CVE-2017-0230, CVE-2017-0234, CVE-2017-0235, CVE-2017-0236, and CVE-2017-0238.

Affected products

VendorProductAffectedFixed
Microsoft Microsoft Edge Windows 10 Version 1703 for 32-bit Systems and Windows 10 Version 1703 for x64-based Systems. —

Affected packages

EcosystemPackageAffectedFixedRecord
NuGet Microsoft.ChakraCore < 1.4.4 1.4.4 GHSA-68cp-h96v-gg3x

References