ChakraCore vulnerabilities

2 known vulnerabilities in ChakraCore from Microsoft. 2 are rated high or critical, and 2 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Microsoft Edge and Internet Explorer Memory Corruption Exploited

  CVE-2020-0878Sep 11, 2020MicrosoftEPSS 2.7%

  <p>A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory. The vulnerability could corrupt memory in a way that could allow an attacker to execute arbitrary code in the context of the current user. An attacker

• 7.5 High severity

  ChakraCore Scripting Engine Type Confusion Exploited

  CVE-2018-8298Jul 11, 2018MicrosoftEPSS 74.7%

  A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore. This CVE ID is unique from CVE-2018-8242, CVE-2018-8283, CV