Description
Microsoft ChakraCore allows an attacker to bypass Control Flow Guard (CFG) in conjunction with another vulnerability to run arbitrary code on a target system, due to how the Chakra scripting engine handles accessing memory, aka "Scripting Engine Security Feature Bypass".
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Microsoft | ChakraCore | ChakraCore | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| NuGet | Microsoft.ChakraCore | < 1.8.0 | 1.8.0 | GHSA-fv8m-p45w-gf38 |