Skip to content
OpenAdvisories
Critical · 9.8 CVE-2017-0252 EUVD-2022-3961GHSA-ghwq-7v3r-5433

ChakraCore RCE Vulnerability

Published May 15, 2017 · Updated Aug 5, 2024 · Assigned by microsoft

Description

A remote code execution vulnerability exists in Microsoft Chakra Core in the way JavaScript engines render when handling objects in memory. aka "Scripting Engine Memory Corruption Vulnerability". This vulnerability is unique from CVE-2017-0223.

Affected products

VendorProductAffectedFixed
Microsoft Chakra Core — —

Affected packages

EcosystemPackageAffectedFixedRecord
NuGet Microsoft.ChakraCore < 1.4.4 1.4.4 GHSA-ghwq-7v3r-5433

References