Microsoft Corporation ChakraCore
8 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2018-0925 | ChakraCore | ChakraCore allows remote code execution, due to how the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory | HIGH 7.5 | 11 % | ||
| CVE-2018-0858 | ChakraCore | ChakraCore allows remote code execution, due to how the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory | HIGH 7.5 | 15 % | ||
| CVE-2018-0818 | ChakraCore | Microsoft ChakraCore allows an attacker to bypass Control Flow Guard (CFG) in conjunction with another vulnerability to run arbitrary code o | HIGH 7.5 | 3.7 % | ||
| CVE-2017-11916 | ChakraCore | ChakraCore allows an attacker to execute arbitrary code in the context of the current user, due to how the ChakraCore scripting engine handl | HIGH 7.5 | 6.2 % | ||
| CVE-2017-11767 | ChakraCore | ChakraCore allows an attacker to gain the same user rights as the current user, due to the way that the ChakraCore scripting engine handles | CRITICAL 9.8 | 9.5 % | ||
| CVE-2017-11801 | ChakraCore | ChakraCore allows an attacker to execute arbitrary code in the context of the current user, due to how the ChakraCore scripting engine handl | HIGH 7.5 | 5.8 % | ||
| CVE-2017-11797 | ChakraCore | ChakraCore allows an attacker to execute arbitrary code in the context of the current user, due to how the ChakraCore scripting engine handl | HIGH 7.5 | 5.8 % | ||
| CVE-2017-8658 | ChakraCore V1.7.1 | A remote code execution vulnerability exists in the way that the Chakra JavaScript engine renders when handling objects in memory, aka "Scri | CRITICAL 9.8 | 20 % |