Description
ChakraCore allows remote code execution, due to how the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0876, CVE-2018-0889, CVE-2018-0893, and CVE-2018-0935.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Microsoft | ChakraCore | ChakraCore | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| NuGet | Microsoft.ChakraCore | < 1.8.2 | 1.8.2 | GHSA-5q2v-52gc-4w7p |