CH
Product
ChakraCore
On CISA KEVExploited in the wildRansomware-linked
255
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 219Medium 31Low 2
Watch
Add ChakraCore to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-0991 | 4.2 | Jun 12 | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based) Affected: before 1.11.10 |
| CVE-2019-0989 | 4.2 | Jun 12 | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based) Affected: before 1.11.10 |
| CVE-2018-8315 | 4.2 | Sep 13 | An information disclosure vulnerability exists when the browser scripting engine improperly handle object types, aka "Microsoft Scripting Engine Information Disclosure… Affected: All versions, or not specified |
| CVE-2017-11874 | 3.1 | Nov 15 | Microsoft Edge in Microsoft Windows 10 1703, 1709, Windows Server, version 1709, and ChakraCore allows an attacker to bypass Control Flow Guard (CFG) to run arbitrary code on a… Affected: All versions, or not specified |
| CVE-2017-11791 | 3.1 | Nov 15 | ChakraCore and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Microsoft Edge and… Affected: All versions, or not specified |