GHSA-jhx3-2w5x-x39xMediumCVSS 6.5

Microsoft.ChakraCore vulnerable to Exposure of Sensitive Information to an Unauthorized Actor

Published
April 9, 2019
Last Modified
January 11, 2023

🔗 CVE IDs covered (1)

CVE-2019-0746 →

📋 Description

An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory in Microsoft Edge, aka 'Scripting Engine Information Disclosure Vulnerability'.

🎯 Affected products1

  • nuget/Microsoft.ChakraCore:< 1.11.7

🔗 References (3)