Skip to content
OpenAdvisories
High · 7.5 CVE-2017-0235 EUVD-2022-5200GHSA-rm8g-7g54-w6fh

ChakraCore RCE Vulnerability

Published May 12, 2017 · Updated Aug 5, 2024 · Assigned by microsoft

Description

A remote code execution vulnerability exists in Microsoft Edge in the way that the Chakra JavaScript engine renders when handling objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This CVE ID is unique from CVE-2017-0224, CVE-2017-0228, CVE-2017-0229, CVE-2017-0230, CVE-2017-0234, CVE-2017-0236, and CVE-2017-0238.

Affected products

VendorProductAffectedFixed
Microsoft Microsoft Edge Windows 10 Version 1703 for 32-bit Systems and Windows 10 Version 1703 for x64-based Systems. —

Affected packages

EcosystemPackageAffectedFixedRecord
NuGet Microsoft.ChakraCore < 1.4.4 1.4.4 GHSA-rm8g-7g54-w6fh

References