Microsoft Corporation Chakracore
8 CVEs affecting Microsoft Corporation Chakracore. Latest disclosed: 2018-03-14. Critical: 2, High: 6.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-11767 | Critical | 9.8 | 2017-11-02 | ChakraCore allows an attacker to gain the same user rights as the current user, due to the way that the ChakraCore scripting engine handles objects in memory… |
CVE-2017-8658 | Critical | 9.8 | 2017-08-11 | A remote code execution vulnerability exists in the way that the Chakra JavaScript engine renders when handling objects in memory, aka "Scripting Engine Memory… |
CVE-2018-0925 | High | 7.5 | 2018-03-14 | ChakraCore allows remote code execution, due to how the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerab… |
CVE-2018-0858 | High | 7.5 | 2018-02-15 | ChakraCore allows remote code execution, due to how the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerab… |
CVE-2018-0818 | High | 7.5 | 2018-01-10 | Microsoft ChakraCore allows an attacker to bypass Control Flow Guard (CFG) in conjunction with another vulnerability to run arbitrary code on a target system… |
CVE-2017-11916 | High | 7.5 | 2017-12-12 | ChakraCore allows an attacker to execute arbitrary code in the context of the current user, due to how the ChakraCore scripting engine handles objects in memor… |
CVE-2017-11801 | High | 7.5 | 2017-10-13 | ChakraCore allows an attacker to execute arbitrary code in the context of the current user, due to how the ChakraCore scripting engine handles objects in memor… |
CVE-2017-11797 | High | 7.5 | 2017-10-13 | ChakraCore allows an attacker to execute arbitrary code in the context of the current user, due to how the ChakraCore scripting engine handles objects in memor… |