Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:nuget/Microsoft.ChakraCore@1.11.18
purl pkg:nuget/Microsoft.ChakraCore@1.11.18
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score 3.6
Vulnerabilities affecting this package (13)
Advisory Summary Fixed in package version
GHSA-qwwg-gc55-qqrv
Aliases:
CVE-2020-17131
Out-of-bounds Write in Chakra Chakra Scripting Engine Memory Corruption Vulnerability
1.11.24
Vulnerable
GHSA-88cw-3m6x-49f7
Aliases:
CVE-2020-17054
Out-of-bounds Write in ChakraCore Chakra Scripting Engine Memory Corruption Vulnerability This CVE ID is unique from CVE-2020-17048.
1.11.23
Vulnerable
GHSA-wc43-7wj6-4ggr
Aliases:
CVE-2020-1180
Remote code execution in ChakraCore A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles …
1.11.22
Vulnerable
GHSA-xxfr-jrgh-x392
Aliases:
CVE-2020-1172
Remote code execution in ChakraCore A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles …
1.11.22
Vulnerable
GHSA-9f8c-f7h4-xghf
Aliases:
CVE-2020-1057
Remote code execution in ChakraCore A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles …
1.11.22
Vulnerable
GHSA-vpc2-7xmf-ppmf
Aliases:
CVE-2020-17048
Out-of-bounds Write in ChakraCore Chakra Scripting Engine Memory Corruption Vulnerability This CVE ID is unique from CVE-2020-17054.
1.11.23
Vulnerable
GHSA-9hjg-j983-mqcc
Aliases:
CVE-2020-1065
ChakraCore RCE Vulnerability A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in …
1.11.19
Vulnerable
GHSA-8xv4-c7rq-j577
Aliases:
CVE-2020-1037
ChakraCore Remote Code Execution Vulnerability A remote code execution vulnerability exists in the way that the Chakra scripting engine handles …
1.11.19
Vulnerable
GHSA-g3m9-qrfj-xw4g
Aliases:
CVE-2020-1073
ChakraCore RCE Vulnerability A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in …
1.11.20
Vulnerable
GHSA-jgrp-6qqq-3284
Aliases:
CVE-2021-42279
Chakra Scripting Engine and ChakraCore Vulnerable to Memory Corruption Chakra Scripting Engine and ChakraCore are vulnerable to memory corruption due … There are no reported fixed by versions.
CVE-2020-1219

Improper Restriction of Operations within the Bounds of a Memory Buffer A remote code execution vulnerability exists in the way …
1.11.20
Vulnerable
CVE-2020-0878

A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory, aka 'Microsoft Browser Memory …
1.11.22
Vulnerable
CVE-2020-17054

Improper Restriction of Operations within the Bounds of a Memory Buffer Chakra Scripting Engine Memory Corruption Vulnerability This CVE ID …
1.11.23
Vulnerable
Vulnerabilities fixed by this package (3)

Advisory Summary Aliases
GHSA-jr84-p554-62pm
ChakraCore RCE Vulnerability A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in … CVE-2020-0969
GHSA-233h-59m2-qqf2
ChakraCore Remote Code Execution Vulnerability A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles … CVE-2020-0970
CVE-2020-1037
Improper Restriction of Operations within the Bounds of a Memory Buffer A remote code execution vulnerability exists in the way …