CH
Product
ChakraCore
On CISA KEVExploited in the wildRansomware-linked
255
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 219Medium 31Low 2
Watch
Add ChakraCore to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-8542 | 7.5 | Nov 14 | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory… Affected: All versions, or not specified |
| CVE-2018-8541 | 7.5 | Nov 14 | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory… Affected: All versions, or not specified |
| CVE-2018-8513 | 7.5 | Oct 10 | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory… Affected: All versions, or not specified |
| CVE-2018-8511 | 7.5 | Oct 10 | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory… Affected: All versions, or not specified |
| CVE-2018-8510 | 7.5 | Oct 10 | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory… Affected: All versions, or not specified |
| CVE-2018-8505 | 7.5 | Oct 10 | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory… Affected: All versions, or not specified |
| CVE-2018-8503 | 7.5 | Oct 10 | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory… Affected: All versions, or not specified |
| CVE-2018-8473 | 7.5 | Oct 10 | A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability." This affects… Affected: All versions, or not specified |
| CVE-2018-8467 | 7.5 | Sep 13 | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory… Affected: All versions, or not specified |
| CVE-2018-8466 | 7.5 | Sep 13 | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory… Affected: through 1.10.1 |
| CVE-2018-8465 | 7.5 | Sep 13 | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory… Affected: All versions, or not specified |
| CVE-2018-8459 | 7.5 | Sep 13 | A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability."… Affected: through 1.10.1 |
| CVE-2018-8456 | 7.5 | Sep 13 | A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability."… Affected: through 1.10.1 |
| CVE-2018-8391 | 7.5 | Sep 13 | A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability."… Affected: All versions, or not specified |
| CVE-2018-8367 | 7.5 | Sep 13 | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory… Affected: All versions, or not specified |
| CVE-2018-8354 | 7.5 | Sep 13 | A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scripting Engine Memory Corruption… Affected: through 1.10.1 |
| CVE-2018-8390 | 7.5 | Aug 15 | A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability."… Affected: ChakraCore |
| CVE-2018-8266 | 7.5 | Aug 15 | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory… Affected: ChakraCore |
| CVE-2018-8355 | 7.5 | Aug 15 | A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption… Affected: ChakraCore |
| CVE-2018-8359 | 7.5 | Aug 15 | A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability."… Affected: ChakraCore |
| CVE-2018-8372 | 7.5 | Aug 15 | A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption… Affected: ChakraCore |
| CVE-2018-8380 | 7.5 | Aug 15 | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory… Affected: ChakraCore |
| CVE-2018-8381 | 7.5 | Aug 15 | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory… Affected: ChakraCore |
| CVE-2018-8384 | 7.5 | Aug 15 | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory… Affected: ChakraCore |
| CVE-2018-8385 | 7.5 | Aug 15 | A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption… Affected: ChakraCore |
| CVE-2018-8294 | 7.5 | Jul 11 | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory… Affected: through 1.10.0 |
| CVE-2018-8291 | 7.5 | Jul 11 | A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption… Affected: before 1.10.1 |
| CVE-2018-8290 | 7.5 | Jul 11 | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory… Affected: through 1.10.0 |
| CVE-2018-8288 | 7.5 | Jul 11 | A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption… Affected: before 1.10.1 |
| CVE-2018-8287 | 7.5 | Jul 11 | A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption… Affected: before 1.10.1 |
| CVE-2018-8286 | 7.5 | Jul 11 | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory… Affected: through 1.10.0 |
| CVE-2018-8283 | 7.5 | Jul 11 | A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability."… Affected: before 1.10.1 |
| CVE-2018-8280 | 7.5 | Jul 11 | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory… Affected: through 1.10.0 |
| CVE-2018-8279 | 7.5 | Jul 11 | A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability." This affects… Affected: through 1.10.0 |
| CVE-2018-8275 | 7.5 | Jul 11 | A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability." This affects… Affected: through 1.10.0 |
| CVE-2018-8243 | 7.5 | Jun 14 | A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability."… Affected: All versions, or not specified |
| CVE-2018-8229 | 7.5 | Jun 14 | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory… Affected: through 1.8.4 |
| CVE-2018-8227 | 7.5 | Jun 14 | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory… Affected: through 1.8.4 |
| CVE-2018-8178 | 7.5 | May 9 | A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory, aka "Microsoft Browser Memory Corruption Vulnerability." This affects… Affected: through 1.8.3 |
| CVE-2018-8177 | 7.5 | May 9 | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory… Affected: through 1.8.3 |
| CVE-2018-8145 | 7.5 | May 9 | An information disclosure vulnerability exists when Chakra improperly discloses the contents of its memory, which could provide an attacker with information to further compromise… Affected: through 1.8.3 |
| CVE-2018-8139 | 7.5 | May 9 | A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scripting Engine Memory Corruption… Affected: through 1.8.3 |
| CVE-2018-8137 | 7.5 | May 9 | A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scripting Engine Memory Corruption… Affected: through 1.8.3 |
| CVE-2018-8133 | 7.5 | May 9 | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory… Affected: through 1.8.3 |
| CVE-2018-8130 | 7.5 | May 9 | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory… Affected: through 1.8.3 |
| CVE-2018-8128 | 7.5 | May 9 | A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scripting Engine Memory Corruption… Affected: through 1.8.3 |
| CVE-2018-1022 | 7.5 | May 9 | A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption… Affected: through 1.8.3 |
| CVE-2018-0954 | 7.5 | May 9 | A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption… Affected: through 1.8.3 |
| CVE-2018-0953 | 7.5 | May 9 | A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scripting Engine Memory Corruption… Affected: through 1.8.3 |
| CVE-2018-0946 | 7.5 | May 9 | A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scripting Engine Memory Corruption… Affected: through 1.8.3 |