Microsoft Corporation ChakraCore
8 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2018-0925 | ChakraCore | ChakraCore allows remote code execution, due to how the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory | HIGH 7.5 | 11 % | ||
| CVE-2018-0858 | ChakraCore | ChakraCore allows remote code execution, due to how the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory | HIGH 7.5 | 15 % | ||
| CVE-2018-0818 | ChakraCore | Microsoft ChakraCore allows an attacker to bypass Control Flow Guard (CFG) in conjunction with another vulnerability to run arbitrary code o | HIGH 7.5 | 3.7 % | ||
| CVE-2017-11916 | ChakraCore | ChakraCore allows an attacker to execute arbitrary code in the context of the current user, due to how the ChakraCore scripting engine handl | HIGH 7.5 | 6.2 % | ||
| CVE-2017-11767 | ChakraCore | ChakraCore allows an attacker to gain the same user rights as the current user, due to the way that the ChakraCore scripting engine handles | CRITICAL 9.8 | 9.5 % | ||
| CVE-2017-11801 | ChakraCore | ChakraCore allows an attacker to execute arbitrary code in the context of the current user, due to how the ChakraCore scripting engine handl | HIGH 7.5 | 5.8 % | ||
| CVE-2017-11797 | ChakraCore | ChakraCore allows an attacker to execute arbitrary code in the context of the current user, due to how the ChakraCore scripting engine handl | HIGH 7.5 | 5.8 % | ||
| CVE-2017-8658 | ChakraCore V1.7.1 | A remote code execution vulnerability exists in the way that the Chakra JavaScript engine renders when handling objects in memory, aka "Scri | CRITICAL 9.8 | 20 % |