Skip to content
OpenAdvisories
High · 7.5 CVE-2020-0811 EUVD-2022-4757GHSA-pg99-mp4c-75g6

ChakraCore RCE Vulnerability

Published Mar 12, 2020 · Updated Aug 4, 2024 · Assigned by microsoft

Vendor: Microsoft Product: ChakraCore Product: Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1709 for 32-bit Systems Product: Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1709 for ARM64-based Systems Product: Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1709 for x64-based Systems Product: Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for 32-bit Systems Product: Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for ARM64-based Systems Product: Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for x64-based Systems Product: Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for 32-bit Systems Product: Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for ARM64-based Systems Product: Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for x64-based Systems Product: Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1903 for 32-bit Systems Product: Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1903 for ARM64-based Systems Product: Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1903 for x64-based Systems Product: Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1909 for 32-bit Systems Product: Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1909 for ARM64-based Systems Product: Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1909 for x64-based Systems Product: Microsoft Edge (EdgeHTML-based) on Windows Server 2019 Package: Microsoft.ChakraCore Platform: Windows Category: Browsers Ecosystem: NuGet

Description

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based)L, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0812.

Affected products

VendorProductAffectedFixed
Microsoft ChakraCore unspecified —
Microsoft Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for 32-bit Systems unspecified —
Microsoft Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for x64-based Systems unspecified —
Microsoft Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for ARM64-based Systems unspecified —
Microsoft Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for 32-bit Systems unspecified —
Microsoft Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for x64-based Systems unspecified —
Microsoft Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for ARM64-based Systems unspecified —
Microsoft Microsoft Edge (EdgeHTML-based) on Windows Server 2019 unspecified —
Microsoft Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1909 for 32-bit Systems unspecified —
Microsoft Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1909 for x64-based Systems unspecified —
Microsoft Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1909 for ARM64-based Systems unspecified —
Microsoft Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1709 for 32-bit Systems unspecified —
Microsoft Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1709 for x64-based Systems unspecified —
Microsoft Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1709 for ARM64-based Systems unspecified —
Microsoft Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1903 for 32-bit Systems unspecified —
Microsoft Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1903 for x64-based Systems unspecified —
Microsoft Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1903 for ARM64-based Systems unspecified —

Affected packages

EcosystemPackageAffectedFixedRecord
NuGet Microsoft.ChakraCore < 1.11.17 1.11.17 GHSA-pg99-mp4c-75g6

References