VulnerableCode Package Details - pkg:nuget/Microsoft.ChakraCore@1.11.9

Vulnerabilities affecting this package (72)

Advisory	Summary	Fixed in package version
GHSA-qwwg-gc55-qqrv Aliases: CVE-2020-17131	Out-of-bounds Write in Chakra Chakra Scripting Engine Memory Corruption Vulnerability	1.11.24 Vulnerable
GHSA-wvhv-rr3v-vhpj Aliases: CVE-2020-0823	Out-of-bounds write in ChakraCore A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects …	1.11.17 Vulnerable
GHSA-5p67-cp9c-hqw4 Aliases: CVE-2020-0848	Out-of-bounds write in ChakraCore A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects …	1.11.17 Vulnerable
GHSA-6cc6-66f5-mxjj Aliases: CVE-2020-0826	Out-of-bounds write in ChakraCore A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects …	1.11.17 Vulnerable
GHSA-2qgv-2cv4-g4cg Aliases: CVE-2020-0832	Out-of-bounds write in ChakraCore A remote code execution vulnerability exists in the way that the scripting engine handles objects in …	1.11.17 Vulnerable
GHSA-h2xm-2p6w-mj2v Aliases: CVE-2020-0831	Out-of-bounds Write in ChakraCore A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects …	1.11.17 Vulnerable
GHSA-c8qc-62qv-5p2x Aliases: CVE-2020-0828	Out-of-bounds Write in ChakraCore A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects …	1.11.17 Vulnerable
GHSA-86gw-g9jv-8vfg Aliases: CVE-2020-0833	Out-of-bounds write in ChakraCore A remote code execution vulnerability exists in the way that the scripting engine handles objects in …	1.11.17 Vulnerable
GHSA-j89m-gcjf-6ghp Aliases: CVE-2020-0825	Out-of-bounds write in ChakraCore A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects …	1.11.17 Vulnerable
GHSA-jv2c-mhcq-6wp4 Aliases: CVE-2020-0829	Out-of-bounds write in ChakraCore A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects …	1.11.17 Vulnerable
GHSA-7j34-xq9v-9mqg Aliases: CVE-2020-0827	Out-of-bounds write in ChakraCore A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects …	1.11.17 Vulnerable
GHSA-g644-6fg4-hrh9 Aliases: CVE-2020-0830	Out-of-bounds write in ChakraCore A remote code execution vulnerability exists in the way the scripting engine handles objects in memory …	1.11.17 Vulnerable
GHSA-88cw-3m6x-49f7 Aliases: CVE-2020-17054	Out-of-bounds Write in ChakraCore Chakra Scripting Engine Memory Corruption Vulnerability This CVE ID is unique from CVE-2020-17048.	1.11.23 Vulnerable
GHSA-wc43-7wj6-4ggr Aliases: CVE-2020-1180	Remote code execution in ChakraCore A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles …	1.11.22 Vulnerable
GHSA-xxfr-jrgh-x392 Aliases: CVE-2020-1172	Remote code execution in ChakraCore A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles …	1.11.22 Vulnerable
GHSA-9f8c-f7h4-xghf Aliases: CVE-2020-1057	Remote code execution in ChakraCore A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles …	1.11.22 Vulnerable
GHSA-pfrg-w49c-8432 Aliases: CVE-2020-0768	Out-of-bounds write in ChakraCore A remote code execution vulnerability exists in the way the scripting engine handles objects in memory …	1.11.17 Vulnerable
GHSA-vpc2-7xmf-ppmf Aliases: CVE-2020-17048	Out-of-bounds Write in ChakraCore Chakra Scripting Engine Memory Corruption Vulnerability This CVE ID is unique from CVE-2020-17054.	1.11.23 Vulnerable
GHSA-vw2g-5827-m9fp Aliases: CVE-2019-1308	Out-of-bounds write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory …	1.11.14 Vulnerable
GHSA-6j89-jhpr-849f Aliases: CVE-2019-1307	Out-of-bounds write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory …	1.11.14 Vulnerable
GHSA-2wwc-w2gw-4329 Aliases: CVE-2019-1366	Out-of-bounds write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory …	1.11.14 Vulnerable
GHSA-p23j-g745-8449 Aliases: CVE-2019-1335	Out-of-bounds write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory …	1.11.14 Vulnerable
GHSA-2452-3rwv-x89c Aliases: CVE-2019-1298	Out-of-bounds write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory …	1.11.13 Vulnerable
GHSA-pcgf-qjx2-qv4q Aliases: CVE-2019-1217	Out-of-bounds write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory …	1.11.13 Vulnerable
GHSA-q99r-j969-6jwr Aliases: CVE-2019-1237	Out-of-bounds write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory …	1.11.13 Vulnerable
GHSA-grvw-q343-58wh Aliases: CVE-2019-1300	Out-of-bounds write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory …	1.11.13 Vulnerable
GHSA-jr84-p554-62pm Aliases: CVE-2020-0969	ChakraCore RCE Vulnerability A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in …	1.11.18 Vulnerable
GHSA-233h-59m2-qqf2 Aliases: CVE-2020-0970	ChakraCore Remote Code Execution Vulnerability A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles …	1.11.18 Vulnerable
GHSA-g67x-mgrv-m3gv Aliases: CVE-2020-0812	ChakraCore RCE Vulnerability A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in …	1.11.17 Vulnerable
GHSA-fhc8-h6hr-h9mq Aliases: CVE-2020-0767	ChakraCore RCE Vulnerability A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in …	1.11.16 Vulnerable
GHSA-9hjg-j983-mqcc Aliases: CVE-2020-1065	ChakraCore RCE Vulnerability A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in …	1.11.19 Vulnerable
GHSA-vvvh-5xrm-pxff Aliases: CVE-2020-0813	ChakraCore information disclosure vulnerability An information disclosure vulnerability exists when Chakra improperly discloses the contents of its memory, which could …	1.11.17 Vulnerable
GHSA-w6qf-35f2-j6h7 Aliases: CVE-2020-0712	ChakraCore RCE Vulnerability A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in …	1.11.16 Vulnerable
GHSA-63fw-7jgf-5hwv Aliases: CVE-2020-0711	ChakraCore RCE Vulnerability A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in …	1.11.16 Vulnerable
GHSA-pg99-mp4c-75g6 Aliases: CVE-2020-0811	ChakraCore RCE Vulnerability A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in …	1.11.17 Vulnerable
GHSA-8xv4-c7rq-j577 Aliases: CVE-2020-1037	ChakraCore Remote Code Execution Vulnerability A remote code execution vulnerability exists in the way that the Chakra scripting engine handles …	1.11.19 Vulnerable
GHSA-g6mc-8679-ghx9 Aliases: CVE-2020-0713	ChakraCore RCE Vulnerability A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in …	1.11.16 Vulnerable
GHSA-g3m9-qrfj-xw4g Aliases: CVE-2020-1073	ChakraCore RCE Vulnerability A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in …	1.11.20 Vulnerable
GHSA-jgrp-6qqq-3284 Aliases: CVE-2021-42279	Chakra Scripting Engine and ChakraCore Vulnerable to Memory Corruption Chakra Scripting Engine and ChakraCore are vulnerable to memory corruption due …	There are no reported fixed by versions.
GHSA-67xp-4726-4978 Aliases: CVE-2020-0710	ChakraCore RCE Vulnerability A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in …	1.11.16 Vulnerable
CVE-2020-1037	Improper Restriction of Operations within the Bounds of a Memory Buffer A remote code execution vulnerability exists in the way …	1.11.18 Vulnerable
CVE-2020-1219	Improper Restriction of Operations within the Bounds of a Memory Buffer A remote code execution vulnerability exists in the way …	1.11.20 Vulnerable
CVE-2019-1426	Out-of-bounds Write A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in …	1.11.15 Vulnerable
CVE-2019-1001	Out-of-bounds Write A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft …	1.11.11 Vulnerable
CVE-2019-1023	Exposure of Sensitive Information to an Unauthorized Actor An information disclosure vulnerability exists when the scripting engine does not properly …	1.11.10 Vulnerable
CVE-2020-0878	A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory, aka 'Microsoft Browser Memory …	1.11.22 Vulnerable
CVE-2019-1427	Out-of-bounds Write A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in …	1.11.15 Vulnerable
CVE-2019-0990	Exposure of Sensitive Information to an Unauthorized Actor An information disclosure vulnerability exists when the scripting engine does not properly …	1.11.10 Vulnerable
CVE-2019-1428	Out-of-bounds Write A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in …	1.11.15 Vulnerable
CVE-2020-17054	Improper Restriction of Operations within the Bounds of a Memory Buffer Chakra Scripting Engine Memory Corruption Vulnerability This CVE ID …	1.11.23 Vulnerable
GHSA-cwp9-956f-vcwh Aliases: CVE-2019-1141	Out-of-bounds write in Microsoft.ChakraCore A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects …	1.11.12 Vulnerable 1.11.12 Vulnerable
GHSA-mw7r-3g6w-85qg Aliases: CVE-2019-1131	Out-of-bounds write in Microsoft.ChakraCore A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects …	1.11.12 Vulnerable 1.11.12 Vulnerable
GHSA-9qw8-ccq9-ffj9 Aliases: CVE-2019-1139	Out-of-bounds write in Microsoft.ChakraCore A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects …	1.11.12 Vulnerable 1.11.12 Vulnerable
GHSA-758c-g2ff-9444 Aliases: CVE-2019-1140	Out-of-bounds write in Microsoft.ChakraCore A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects …	1.11.12 Vulnerable 1.11.12 Vulnerable
GHSA-53r4-h27g-rg3x Aliases: CVE-2019-0992	Chakra Scripting Engine Out-of-bounds write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles …	1.11.10 Vulnerable 1.11.10 Vulnerable
GHSA-mg98-x2cm-4cpf Aliases: CVE-2019-1106	Out-of-bounds write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory …	1.11.11 Vulnerable 1.11.11 Vulnerable
GHSA-2rfj-2mwp-787v Aliases: CVE-2019-0993	Chakra Scripting Engine Out-of-bounds write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles …	1.11.10 Vulnerable 1.11.10 Vulnerable
GHSA-rh4p-g7x6-8pqg Aliases: CVE-2019-1062	Out-of-bounds write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory …	1.11.11 Vulnerable 1.11.11 Vulnerable
GHSA-v89p-5hr2-4rh4 Aliases: CVE-2019-1197	Out-of-bounds write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory …	1.11.12 Vulnerable 1.11.12 Vulnerable
GHSA-pwpr-vp2v-99xw Aliases: CVE-2019-1138	Out-of-bounds write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory …	1.11.13 Vulnerable 1.11.13 Vulnerable
GHSA-2x75-mf24-588m Aliases: CVE-2019-1092	Out-of-bounds write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory …	1.11.11 Vulnerable 1.11.11 Vulnerable
GHSA-5rcr-q3rx-j7vr Aliases: CVE-2019-1107	Out-of-bounds write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory …	1.11.11 Vulnerable 1.11.11 Vulnerable
GHSA-vmf5-924f-25f2 Aliases: CVE-2019-1103	Out-of-bounds write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory …	1.11.11 Vulnerable 1.11.11 Vulnerable
GHSA-ppxc-pmx9-qjv9 Aliases: CVE-2019-1195	Out-of-bounds write in Microsoft.ChakraCore A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects …	1.11.12 Vulnerable 1.11.12 Vulnerable
GHSA-9824-rp6m-xx9w Aliases: CVE-2019-0989	Chakra Scripting Engine Memory Corruption Vulnerability A remote code execution vulnerability exists in the way that the Chakra scripting engine …	1.11.10 Vulnerable 1.11.10 Vulnerable
GHSA-hfm2-fffh-v47v Aliases: CVE-2019-1196	Out-of-bounds write in ChakraCore A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects …	1.11.12 Vulnerable 1.11.12 Vulnerable
GHSA-6973-94v8-5mgw Aliases: CVE-2019-0991	Chakra Scripting Engine Out-of-bounds write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles …	1.11.10 Vulnerable 1.11.10 Vulnerable
GHSA-w32p-76xr-88pc Aliases: CVE-2019-1003	Chakra Scripting Engine Out-of-bounds write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles …	1.11.10 Vulnerable 1.11.10 Vulnerable
GHSA-fxrx-5j36-pwg5 Aliases: CVE-2019-1051	Chakra Scripting Engine RCE via Out-of-bounds write A remote code execution vulnerability exists in the way that the Chakra scripting …	1.11.10 Vulnerable 1.11.10 Vulnerable
GHSA-v8jw-x9wq-hw4v Aliases: CVE-2019-1052	Chakra Scripting Engine RCE via Out-of-bounds write A remote code execution vulnerability exists in the way that the Chakra scripting …	1.11.10 Vulnerable 1.11.10 Vulnerable
GHSA-4v6q-gjm6-6vv4 Aliases: CVE-2019-1002	ChakraCore RCE via Out-of-bounds write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles …	1.11.10 Vulnerable 1.11.10 Vulnerable
GHSA-g8q3-rcf9-qx4q Aliases: CVE-2019-1024	Chakra Scripting Engine RCE Vulnerability A remote code execution vulnerability exists in the way that the Chakra scripting engine handles …	1.11.10 Vulnerable 1.11.10 Vulnerable

Next non-vulnerable version	None.
Latest non-vulnerable version	None.
Risk score	3.6

Advisory	Summary	Aliases
GHSA-hrmm-f4j8-8vxc	Out-of-bounds write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory …	CVE-2019-0922
GHSA-h23m-w6x5-jwr4	Out-of-bounds write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory …	CVE-2019-0923
GHSA-rx34-jff5-ph35	Out-of-bounds write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory …	CVE-2019-0917
GHSA-7423-5qfm-g648	Out-of-bounds write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory …	CVE-2019-0916
GHSA-fm9p-5m9f-rq85	Out-of-bounds write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory …	CVE-2019-0915
GHSA-w89r-qch4-8jv5	Out-of-bounds write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory …	CVE-2019-0912
GHSA-9735-p6r2-2hgh	Out-of-bounds write A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft …	CVE-2019-0911
GHSA-h6wf-hvwc-fm77	Out-of-bounds write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory …	CVE-2019-0914
GHSA-37pf-w9ff-gqvm	Out-of-bounds write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory …	CVE-2019-0927
GHSA-5rq8-3wvf-wrfg	Out-of-bounds write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory …	CVE-2019-0933
GHSA-v648-p92f-9996	Out-of-bounds write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory …	CVE-2019-0925
GHSA-59cj-99cw-rq64	Out-of-bounds write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory …	CVE-2019-0913
GHSA-prxj-c66c-4gcf	Out-of-bounds write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory …	CVE-2019-0924
GHSA-8gvg-8vhf-h26g	Out-of-bounds write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory …	CVE-2019-0937