Microsoft Chakracore
271 CVEs affecting Microsoft Chakracore. Latest disclosed: 2023-07-18. Critical: 3, High: 229.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-8500 | Critical | 9.8 | 2018-10-10 | A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption… |
CVE-2017-11767 | Critical | 9.8 | 2017-11-02 | ChakraCore allows an attacker to gain the same user rights as the current user, due to the way that the ChakraCore scripting engine handles objects in memory… |
CVE-2017-8658 | Critical | 9.8 | 2017-08-11 | A remote code execution vulnerability exists in the way that the Chakra JavaScript engine renders when handling objects in memory, aka "Scripting Engine Memory… |
CVE-2020-1555 | High | 8.8 | 2020-08-17 | A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge (HTML-based). The vulnerability c… |
CVE-2019-1140 | High | 8.8 | 2019-08-14 | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based). The vulnerab… |
CVE-2020-1073 | High | 8.1 | 2020-06-09 | A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption… |
CVE-2019-0649 | High | 8.1 | 2019-03-05 | A vulnerability exists in Microsoft Chakra JIT server, aka 'Scripting Engine Elevation of Privileged Vulnerability'. |
CVE-2020-23315 | High | 7.5 | 2022-01-20 | There is an ASSERTION (pFuncBody->GetYieldRegister() == oldYieldRegister) failed in Js::DebugContext::RundownSourcesAndReparse in ChakraCore version 1.12.0.0-b… |
CVE-2020-1219 | High | 7.5 | 2020-06-09 | A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory, aka 'Microsoft Browser Memory Corruption Vulnerabilit… |
CVE-2020-1065 | High | 7.5 | 2020-05-21 | A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption… |
CVE-2020-1037 | High | 7.5 | 2020-05-21 | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based), aka 'Chakra… |
CVE-2020-0970 | High | 7.5 | 2020-04-15 | A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption… |
CVE-2020-0969 | High | 7.5 | 2020-04-15 | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based), aka 'Chakra… |
CVE-2020-0848 | High | 7.5 | 2020-03-12 | A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption… |
CVE-2020-0831 | High | 7.5 | 2020-03-12 | A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption… |
CVE-2020-0830 | High | 7.5 | 2020-03-12 | A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka 'Scripting Engine Memory Corr… |
CVE-2020-0829 | High | 7.5 | 2020-03-12 | A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption… |
CVE-2020-0828 | High | 7.5 | 2020-03-12 | A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption… |
CVE-2020-0827 | High | 7.5 | 2020-03-12 | A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption… |
CVE-2020-0826 | High | 7.5 | 2020-03-12 | A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption… |