Skip to content
OpenAdvisories
Critical · 9.8 CVE-2018-8500 EUVD-2022-3843GHSA-fw42-4mq4-4qpq

ChakraCore RCE Vulnerability

Published Oct 10, 2018 · Updated Aug 5, 2024 · Assigned by microsoft

Description

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore.

Affected products

VendorProductAffectedFixed
Microsoft ChakraCore ChakraCore —

Affected packages

EcosystemPackageAffectedFixedRecord
NuGet Microsoft.ChakraCore < 1.11.2 1.11.2 GHSA-fw42-4mq4-4qpq

References