CH
Product
ChakraCore
by Microsoft · last CVE Jul 18, 2023
On CISA KEVExploited in the wildRansomware-linked
255
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 219Medium 31Low 2
Watch

Add ChakraCore to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-0878
RansomwareIn wildKEV
4.2
3%
Sep 11
Microsoft Browser Memory Corruption Vulnerability
Affected: before publication
CVE-2019-1023
6.5
5%
Jun 12
An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory in Microsoft Edge
Affected: before 1.11.10
CVE-2019-0990
6.5
5%
Jun 12
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based)
Affected: before 1.11.10
CVE-2019-0746
6.5
7%
Apr 9
An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory in Microsoft Edge, aka 'Scripting Engine Information Disclosure…
Affected: All versions, or not specified
CVE-2019-0658
6.5
8%
Mar 5
An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory in Microsoft Edge, aka 'Scripting Engine Information Disclosure…
Affected: before 1.11.6
CVE-2023-37143
5.5
1%
Jul 18
ChakraCore branch master cbb9b was discovered to contain a segmentation violation via the function BackwardPass::IsEmptyLoopAfterMemOp()
Affected: All versions, or not specified
CVE-2023-37142
5.5
1%
Jul 18
ChakraCore branch master cbb9b was discovered to contain a segmentation violation via the function Js::EntryPointInfo::HasInlinees()
Affected: All versions, or not specified
CVE-2023-37141
5.5
1%
Jul 18
ChakraCore branch master cbb9b was discovered to contain a segmentation violation via the function Js::ProfilingHelpers::ProfiledNewScArray()
Affected: All versions, or not specified
CVE-2023-37140
5.5
1%
Jul 18
ChakraCore branch master cbb9b was discovered to contain a segmentation violation via the function Js::DiagScopeVariablesWalker::GetChildrenCount()
Affected: All versions, or not specified
CVE-2023-37139
5.5
1%
Jul 18
ChakraCore branch master cbb9b was discovered to contain a stack overflow vulnerability via the function Js::ScopeSlots::IsDebuggerScopeSlotArray()
Affected: All versions, or not specified
CVE-2018-0800
5.3
7%
Jan 4
Microsoft Edge in Microsoft Windows 10 1709 allows an attacker to obtain information to further compromise the user's system, due to how the scripting engine handles objects in…
Affected: through 1.7.6
CVE-2018-0780
5.3
59%
Jan 4
Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to obtain information to further compromise the user's system, due…
Affected: before 1.7.6
CVE-2018-0767
5.3
65%
Jan 4
Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to obtain information to further compromise the user's system, due to how…
Affected: before 1.7.6
CVE-2017-11919
5.3
6%
Dec 12
ChakraCore, and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, and Windows 10 Gold, 1511, 1607,…
Affected: before 1.7.5; before 1.7.5
CVE-2018-8452
4.3
6%
Sep 13
An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory in Microsoft browsers, aka "Scripting Engine Information…
Affected: All versions, or not specified
CVE-2020-17131
4.2
2%
Dec 10
Chakra Scripting Engine Memory Corruption Vulnerability
Affected: before 1.11.0
CVE-2020-17054
4.2
2%
Nov 11
Chakra Scripting Engine Memory Corruption Vulnerability
Affected: 1.11.0 before 1.11.23
CVE-2020-17048
4.2
2%
Nov 11
Chakra Scripting Engine Memory Corruption Vulnerability
Affected: All versions, or not specified
CVE-2020-1180
4.2
2%
Sep 11
<p>A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory
Affected: before 1.11.22
CVE-2020-1172
4.2
2%
Sep 11
<p>A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory
Affected: before 1.11.22
CVE-2020-1057
4.2
2%
Sep 11
<p>A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory
Affected: before 1.11.22
CVE-2020-1065
4.2
2%
May 21
A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory
Affected: before 1.11.19
CVE-2020-1037
4.2
2%
May 21
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based)
Affected: All versions, or not specified
CVE-2019-1052
4.2
2%
Jun 12
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based)
Affected: before 1.11.10
CVE-2019-1051
4.2
4%
Jun 12
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based)
Affected: before 1.11.10
CVE-2019-1024
4.2
2%
Jun 12
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based)
Affected: before 1.11.10
CVE-2019-1003
4.2
2%
Jun 12
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based)
Affected: before 1.11.10
CVE-2019-0993
4.2
2%
Jun 12
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based)
Affected: before 1.11.10
CVE-2019-0991
4.2
2%
Jun 12
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based)
Affected: before 1.11.10
CVE-2019-0989
4.2
2%
Jun 12
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based)
Affected: before 1.11.10
CVE-2018-8315
4.2
3%
Sep 13
An information disclosure vulnerability exists when the browser scripting engine improperly handle object types, aka "Microsoft Scripting Engine Information Disclosure…
Affected: All versions, or not specified
Showing 31