Microsoft Corporation ChakraCore, Microsoft Edge
40 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2018-0939 | Microsoft Windows 10 1703 and 1709. | ChakraCore and Microsoft Edge in Windows 10 1703 and 1709 allow information disclosure, due to how the scripting engine handles objects in m | MEDIUM 4.3 | 5.5 % | ||
| CVE-2018-0937 | ChakraCore, and Microsoft Windows 10 1703 and 1709. | ChakraCore and Microsoft Windows 10 1703 and 1709 allow remote code execution, due to how the Chakra scripting engine handles objects in mem | HIGH 7.5 | 15 % | ||
| CVE-2018-0936 | ChakraCore and Microsoft Windows 10 1709. | ChakraCore and Microsoft Windows 10 1709 allow remote code execution, due to how the Chakra scripting engine handles objects in memory, aka | HIGH 7.5 | 15 % | ||
| CVE-2018-0934 | ChakraCore, Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016. | ChakraCore and Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the Chakr | HIGH 7.5 | 66 % | ||
| CVE-2018-0933 | ChakraCore, Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016. | ChakraCore and Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the Chakr | HIGH 7.5 | 66 % | ||
| CVE-2018-0931 | ChakraCore, Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016. | ChakraCore and Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the Chakr | HIGH 7.5 | 11 % | ||
| CVE-2018-0930 | ChakraCore and Microsoft Windows 10 1709 | ChakraCore and Microsoft Edge in Microsoft Windows 10 1709 allows remote code execution, due to how the Chakra scripting engine handles obje | HIGH 7.5 | 12 % | ||
| CVE-2018-0874 | ChakraCore, Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016. | ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, du | HIGH 7.5 | 16 % | ||
| CVE-2018-0873 | ChakraCore, Microsoft Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016. | ChakraCore and Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to h | HIGH 7.5 | 15 % | ||
| CVE-2018-0872 | ChakraCore, Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016. | ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, du | HIGH 7.5 | 16 % | ||
| CVE-2017-11918 | Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016. | ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to gain the same user r | HIGH 7.5 | 63 % | ||
| CVE-2017-11914 | Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016. | ChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to gain the same user rights | HIGH 7.5 | 63 % | ||
| CVE-2017-11911 | ChakraCore and Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016. | ChakraCore and Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the | HIGH 7.5 | 65 % | ||
| CVE-2017-11910 | ChakraCore and Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016. | ChakraCore and Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context | HIGH 7.5 | 8.6 % | ||
| CVE-2017-11909 | Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016. | ChakraCore and Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the | HIGH 7.5 | 65 % | ||
| CVE-2017-11908 | Windows 10 1709 | ChakraCore and Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting eng | HIGH 7.5 | 8.6 % | ||
| CVE-2017-11905 | Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016. | ChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in | HIGH 7.5 | 8.6 % | ||
| CVE-2017-11893 | Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016. | ChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in | HIGH 7.5 | 68 % | ||
| CVE-2017-11889 | Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016. | ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary co | HIGH 7.5 | 8.6 % | ||
| CVE-2017-11873 | Windows 10 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709. | ChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker | HIGH 7.5 | 70 % | ||
| CVE-2017-11871 | Windows 10 1703, 1709, and Windows Server, version 1709. | ChakraCore and Microsoft Edge in Windows 10 1703, 1709, and Windows Server, version 1709 allows an attacker to gain the same user rights as | HIGH 7.5 | 8.0 % | ||
| CVE-2017-11870 | Windows 10 1703, 1709, and Windows Server, version 1709. | ChakraCore and Microsoft Edge in Windows 10 1703, 1709, and Windows Server, version 1709 allows an attacker to gain the same user rights as | HIGH 7.5 | 60 % | ||
| CVE-2017-11866 | Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709. | ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an att | HIGH 7.5 | 8.0 % | ||
| CVE-2017-11862 | Windows 10 1709 and Windows Server, version 1709. | ChakraCore and Microsoft Edge in Windows 10 1709 and Windows Server, version 1709 allows an attacker to gain the same user rights as the cur | HIGH 7.5 | 7.9 % | ||
| CVE-2017-11861 | Windows 10 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709. | Microsoft Edge in Windows 10 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the same user | HIGH 7.5 | 64 % | ||
| CVE-2017-11841 | Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709. | ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an att | HIGH 7.5 | 60 % | ||
| CVE-2017-11840 | Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709. | ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an att | HIGH 7.5 | 60 % | ||
| CVE-2017-11836 | ChakraCore, Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709. | ChakraCore, and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 al | HIGH 7.5 | 8.0 % | ||
| CVE-2017-11821 | ChakraCore, Microsoft Windows 10 1703. | ChakraCore and Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user, | HIGH 7.5 | 8.8 % | ||
| CVE-2017-11812 | ChakraCore and Microsoft Windows 10 1511, 1607, 1703, and Windows Server 2016. | ChakraCore and Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code | HIGH 7.5 | 47 % | ||
| CVE-2017-11809 | ChakraCore, Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016. | ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrar | HIGH 7.5 | 68 % | ||
| CVE-2017-11808 | ChakraCore, Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016. | ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrar | HIGH 7.5 | 8.8 % | ||
| CVE-2017-11807 | ChakraCore and Microsoft Windows 10 1703 | ChakraCore and Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user, | HIGH 7.5 | 8.8 % | ||
| CVE-2017-11806 | ChakraCore and Microsoft Windows 10 1703 | ChakraCore and Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user, | HIGH 7.5 | 8.8 % | ||
| CVE-2017-11805 | ChakraCore, Microsoft Windows 10 1703. | ChakraCore and Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user, | HIGH 7.5 | 8.8 % | ||
| CVE-2017-11804 | ChakraCore, Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016. | ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrar | HIGH 7.5 | 8.8 % | ||
| CVE-2017-11802 | ChakraCore, Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016. | ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrar | HIGH 7.5 | 69 % | ||
| CVE-2017-11799 | ChakraCore and Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016. | ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrar | HIGH 7.5 | 64 % | ||
| CVE-2017-11796 | ChakraCore and Windows 10 1703 | ChakraCore and Microsoft Edge in Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user, due to how | HIGH 7.5 | 8.8 % | ||
| CVE-2017-11792 | ChakraCore and Microsoft Windows 10 1703 | ChakraCore and Microsoft Edge in Microsoft Windows 10 1703 allow an attacker to execute arbitrary code in the context of the current user, d | HIGH 7.5 | 8.8 % |