What is GHSA-w4qx-vw2w-q566?

GHSA-w4qx-vw2w-q566 is a security advisory published by GitHub Security Advisories with High severity. ChakraCore RCE Vulnerability

Which CVE IDs does GHSA-w4qx-vw2w-q566 cover?

GHSA-w4qx-vw2w-q566 covers the following CVE IDs: CVE-2018-8243. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-w4qx-vw2w-q566?

GHSA-w4qx-vw2w-q566 has a CVSS v3 base score of 7.5, published by GitHub Security Advisories.

Which products are affected by GHSA-w4qx-vw2w-q566?

GHSA-w4qx-vw2w-q566 affects 1 product, including: nuget/Microsoft.ChakraCore:\u003c 1.8.5.

GHSA-w4qx-vw2w-q566HighCVSS 7.5

ChakraCore RCE Vulnerability

Vendor

GitHub Security Advisories

Published

May 13, 2022

Last Modified

August 28, 2023

🔗 CVE IDs covered (1)

CVE-2018-8243 →

📋 Description

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore. This CVE ID is unique from CVE-2018-8267.

🎯 Affected products1

nuget/Microsoft.ChakraCore:< 1.8.5

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2018-8243
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8243
https://github.com/chakra-core/ChakraCore/wiki/Roadmap#v185
https://web.archive.org/web/20210124175604/http://www.securityfocus.com/bid/104403
https://github.com/advisories/GHSA-w4qx-vw2w-q566