CH
Product
ChakraCore
On CISA KEVExploited in the wildRansomware-linked
255
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 219Medium 31Low 2
Watch
Add ChakraCore to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-8298 In wildKEV | 7.5 | Jul 11 | ChakraCore Scripting Engine Type Confusion Vulnerability Affected: ChakraCore |
| CVE-2020-0878 RansomwareIn wildKEV | 4.2 | Sep 11 | Microsoft Browser Memory Corruption Vulnerability Affected: before publication |
| CVE-2018-8500 | 9.8 | Oct 10 | A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability."… Affected: All versions, or not specified |
| CVE-2017-11767 | 9.8 | Nov 2 | ChakraCore allows an attacker to gain the same user rights as the current user, due to the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting… Affected: All versions, or not specified |
| CVE-2017-8658 | 9.8 | Aug 11 | A remote code execution vulnerability exists in the way that the Chakra JavaScript engine renders when handling objects in memory, aka "Scripting Engine Memory Corruption… Affected: through 1.7.0 |
| CVE-2020-1555 | 8.8 | Aug 17 | A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge (HTML-based) Affected: All versions, or not specified |
| CVE-2020-1073 | 8.1 | Jun 9 | A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability' Affected: before 1.11.20 |
| CVE-2019-0649 | 8.1 | Mar 5 | A vulnerability exists in Microsoft Chakra JIT server, aka 'Scripting Engine Elevation of Privileged Vulnerability' Affected: before 1.11.6 |
| CVE-2020-23315 | 7.5 | Jan 20 | There is an ASSERTION (pFuncBody->GetYieldRegister() == oldYieldRegister) failed in Js::DebugContext::RundownSourcesAndReparse in ChakraCore version 1.12.0.0-beta Affected: 1.12.0.0 |
| CVE-2020-1219 | 7.5 | Jun 9 | A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory, aka 'Microsoft Browser Memory Corruption Vulnerability' Affected: before 1.11.20 |
| CVE-2020-0970 | 7.5 | Apr 15 | A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability' Affected: before 1.11.18 |
| CVE-2020-0969 | 7.5 | Apr 15 | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based), aka 'Chakra Scripting Engine… Affected: before 1.11.18 |
| CVE-2020-0848 | 7.5 | Mar 12 | A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability' Affected: before 1.11.17 |
| CVE-2020-0831 | 7.5 | Mar 12 | A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability' Affected: before 1.11.17 |
| CVE-2020-0830 | 7.5 | Mar 12 | A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka 'Scripting Engine Memory Corruption… Affected: before 1.11.17 |
| CVE-2020-0829 | 7.5 | Mar 12 | A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability' Affected: before 1.11.17 |
| CVE-2020-0828 | 7.5 | Mar 12 | A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability' Affected: before 1.11.17 |
| CVE-2020-0827 | 7.5 | Mar 12 | A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability' Affected: before 1.11.17 |
| CVE-2020-0826 | 7.5 | Mar 12 | A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability' Affected: before 1.11.17 |
| CVE-2020-0825 | 7.5 | Mar 12 | A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability' Affected: before 1.11.17 |
| CVE-2020-0823 | 7.5 | Mar 12 | A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability' Affected: before 1.11.17 |
| CVE-2020-0813 | 7.5 | Mar 12 | An information disclosure vulnerability exists when Chakra improperly discloses the contents of its memory, which could provide an attacker with information to further compromise… Affected: All versions, or not specified |
| CVE-2020-0812 | 7.5 | Mar 12 | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based)L, aka 'Chakra Scripting Engine… Affected: All versions, or not specified |
| CVE-2020-0811 | 7.5 | Mar 12 | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based)L, aka 'Chakra Scripting Engine… Affected: All versions, or not specified |
| CVE-2020-0768 | 7.5 | Mar 12 | A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka 'Scripting Engine Memory Corruption… Affected: before 1.11.17 |
| CVE-2020-0767 | 7.5 | Feb 11 | A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability' Affected: before 1.11.16 |
| CVE-2020-0713 | 7.5 | Feb 11 | A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability' Affected: before 1.11.16 |
| CVE-2020-0712 | 7.5 | Feb 11 | A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability' Affected: before 1.11.16 |
| CVE-2020-0711 | 7.5 | Feb 11 | A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability' Affected: before 1.11.16 |
| CVE-2020-0710 | 7.5 | Feb 11 | A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability' Affected: before 1.11.16 |
| CVE-2019-1428 | 7.5 | Nov 12 | A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge (HTML-based), aka 'Scripting Engine Memory Corruption… Affected: before 1.11.15 |
| CVE-2019-1427 | 7.5 | Nov 12 | A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge (HTML-based), aka 'Scripting Engine Memory Corruption… Affected: before 1.11.15 |
| CVE-2019-1426 | 7.5 | Nov 12 | A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge (HTML-based), aka 'Scripting Engine Memory Corruption… Affected: before 1.11.15 |
| CVE-2019-1366 | 7.5 | Oct 10 | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory… Affected: All versions, or not specified |
| CVE-2019-1335 | 7.5 | Oct 10 | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory… Affected: All versions, or not specified |
| CVE-2019-1308 | 7.5 | Oct 10 | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory… Affected: before 1.11.14 |
| CVE-2019-1307 | 7.5 | Oct 10 | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory… Affected: before 1.11.14 |
| CVE-2019-1300 | 7.5 | Sep 11 | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory… Affected: before 1.11.13 |
| CVE-2019-1298 | 7.5 | Sep 11 | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory… Affected: before 1.11.13 |
| CVE-2019-1237 | 7.5 | Sep 11 | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory… Affected: before 1.11.13 |
| CVE-2019-1217 | 7.5 | Sep 11 | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory… Affected: before 1.11.13 |
| CVE-2019-1138 | 7.5 | Sep 11 | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory… Affected: before 1.11.13 |
| CVE-2019-1107 | 7.5 | Jul 15 | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory… Affected: before 1.11.11 |
| CVE-2019-1106 | 7.5 | Jul 15 | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory… Affected: before 1.11.11 |
| CVE-2019-1103 | 7.5 | Jul 15 | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory… Affected: before 1.11.11 |
| CVE-2019-1092 | 7.5 | Jul 15 | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory… Affected: before 1.11.11 |
| CVE-2019-1062 | 7.5 | Jul 15 | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory… Affected: before 1.11.11 |
| CVE-2019-1001 | 7.5 | Jul 15 | A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka 'Scripting Engine Memory Corruption… Affected: before 1.11.11 |
| CVE-2019-0937 | 7.5 | May 16 | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory… Affected: before 1.11.9 |
| CVE-2019-0933 | 7.5 | May 16 | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory… Affected: before 1.11.9 |