GHSA-448h-7hmp-99fgCriticalCVSS 9.8

ChakraCore RCE Vulnerability

Published
May 17, 2022
Last Modified
October 24, 2023

🔗 CVE IDs covered (1)

CVE-2017-0223 →

📋 Description

A remote code execution vulnerability exists in Microsoft Chakra Core in the way JavaScript engines render when handling objects in memory. aka "Scripting Engine Memory Corruption Vulnerability". This vulnerability is unique from CVE-2017-0252.

🎯 Affected products1

  • nuget/Microsoft.ChakraCore:< 1.4.4

🔗 References (6)