CH
Product
ChakraCore
On CISA KEVExploited in the wildRansomware-linked
255
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 219Medium 31Low 2
Watch
Add ChakraCore to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-0878 RansomwareIn wildKEV | 4.2 | Sep 11 | Microsoft Browser Memory Corruption Vulnerability Affected: before publication |
| CVE-2019-1023 | 6.5 | Jun 12 | An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory in Microsoft Edge Affected: before 1.11.10 |
| CVE-2019-0990 | 6.5 | Jun 12 | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based) Affected: before 1.11.10 |
| CVE-2019-0746 | 6.5 | Apr 9 | An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory in Microsoft Edge, aka 'Scripting Engine Information Disclosure… Affected: All versions, or not specified |
| CVE-2019-0658 | 6.5 | Mar 5 | An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory in Microsoft Edge, aka 'Scripting Engine Information Disclosure… Affected: before 1.11.6 |
| CVE-2023-37143 | 5.5 | Jul 18 | ChakraCore branch master cbb9b was discovered to contain a segmentation violation via the function BackwardPass::IsEmptyLoopAfterMemOp() Affected: All versions, or not specified |
| CVE-2023-37142 | 5.5 | Jul 18 | ChakraCore branch master cbb9b was discovered to contain a segmentation violation via the function Js::EntryPointInfo::HasInlinees() Affected: All versions, or not specified |
| CVE-2023-37141 | 5.5 | Jul 18 | ChakraCore branch master cbb9b was discovered to contain a segmentation violation via the function Js::ProfilingHelpers::ProfiledNewScArray() Affected: All versions, or not specified |
| CVE-2023-37140 | 5.5 | Jul 18 | ChakraCore branch master cbb9b was discovered to contain a segmentation violation via the function Js::DiagScopeVariablesWalker::GetChildrenCount() Affected: All versions, or not specified |
| CVE-2023-37139 | 5.5 | Jul 18 | ChakraCore branch master cbb9b was discovered to contain a stack overflow vulnerability via the function Js::ScopeSlots::IsDebuggerScopeSlotArray() Affected: All versions, or not specified |
| CVE-2018-0800 | 5.3 | Jan 4 | Microsoft Edge in Microsoft Windows 10 1709 allows an attacker to obtain information to further compromise the user's system, due to how the scripting engine handles objects in… Affected: through 1.7.6 |
| CVE-2018-0780 | 5.3 | Jan 4 | Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to obtain information to further compromise the user's system, due… Affected: before 1.7.6 |
| CVE-2018-0767 | 5.3 | Jan 4 | Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to obtain information to further compromise the user's system, due to how… Affected: before 1.7.6 |
| CVE-2017-11919 | 5.3 | Dec 12 | ChakraCore, and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, and Windows 10 Gold, 1511, 1607,… Affected: before 1.7.5; before 1.7.5 |
| CVE-2018-8452 | 4.3 | Sep 13 | An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory in Microsoft browsers, aka "Scripting Engine Information… Affected: All versions, or not specified |
| CVE-2020-17131 | 4.2 | Dec 10 | Chakra Scripting Engine Memory Corruption Vulnerability Affected: before 1.11.0 |
| CVE-2020-17054 | 4.2 | Nov 11 | Chakra Scripting Engine Memory Corruption Vulnerability Affected: 1.11.0 before 1.11.23 |
| CVE-2020-17048 | 4.2 | Nov 11 | Chakra Scripting Engine Memory Corruption Vulnerability Affected: All versions, or not specified |
| CVE-2020-1180 | 4.2 | Sep 11 | <p>A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory Affected: before 1.11.22 |
| CVE-2020-1172 | 4.2 | Sep 11 | <p>A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory Affected: before 1.11.22 |
| CVE-2020-1057 | 4.2 | Sep 11 | <p>A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory Affected: before 1.11.22 |
| CVE-2020-1065 | 4.2 | May 21 | A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory Affected: before 1.11.19 |
| CVE-2020-1037 | 4.2 | May 21 | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based) Affected: All versions, or not specified |
| CVE-2019-1052 | 4.2 | Jun 12 | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based) Affected: before 1.11.10 |
| CVE-2019-1051 | 4.2 | Jun 12 | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based) Affected: before 1.11.10 |
| CVE-2019-1024 | 4.2 | Jun 12 | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based) Affected: before 1.11.10 |
| CVE-2019-1003 | 4.2 | Jun 12 | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based) Affected: before 1.11.10 |
| CVE-2019-0993 | 4.2 | Jun 12 | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based) Affected: before 1.11.10 |
| CVE-2019-0991 | 4.2 | Jun 12 | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based) Affected: before 1.11.10 |
| CVE-2019-0989 | 4.2 | Jun 12 | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based) Affected: before 1.11.10 |
| CVE-2018-8315 | 4.2 | Sep 13 | An information disclosure vulnerability exists when the browser scripting engine improperly handle object types, aka "Microsoft Scripting Engine Information Disclosure… Affected: All versions, or not specified |
Showing 31
