VulnerableCode Package Details - pkg:nuget/Microsoft.ChakraCore@1.7.4

Vulnerabilities affecting this package (261)

Advisory	Summary	Fixed in package version
GHSA-qwwg-gc55-qqrv Aliases: CVE-2020-17131	Out-of-bounds Write in Chakra Chakra Scripting Engine Memory Corruption Vulnerability	1.11.24 Vulnerable
GHSA-wvhv-rr3v-vhpj Aliases: CVE-2020-0823	Out-of-bounds write in ChakraCore A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects …	1.11.17 Vulnerable
GHSA-5p67-cp9c-hqw4 Aliases: CVE-2020-0848	Out-of-bounds write in ChakraCore A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects …	1.11.17 Vulnerable
GHSA-6cc6-66f5-mxjj Aliases: CVE-2020-0826	Out-of-bounds write in ChakraCore A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects …	1.11.17 Vulnerable
GHSA-2qgv-2cv4-g4cg Aliases: CVE-2020-0832	Out-of-bounds write in ChakraCore A remote code execution vulnerability exists in the way that the scripting engine handles objects in …	1.11.17 Vulnerable
GHSA-h2xm-2p6w-mj2v Aliases: CVE-2020-0831	Out-of-bounds Write in ChakraCore A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects …	1.11.17 Vulnerable
GHSA-c8qc-62qv-5p2x Aliases: CVE-2020-0828	Out-of-bounds Write in ChakraCore A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects …	1.11.17 Vulnerable
GHSA-86gw-g9jv-8vfg Aliases: CVE-2020-0833	Out-of-bounds write in ChakraCore A remote code execution vulnerability exists in the way that the scripting engine handles objects in …	1.11.17 Vulnerable
GHSA-j89m-gcjf-6ghp Aliases: CVE-2020-0825	Out-of-bounds write in ChakraCore A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects …	1.11.17 Vulnerable
GHSA-jv2c-mhcq-6wp4 Aliases: CVE-2020-0829	Out-of-bounds write in ChakraCore A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects …	1.11.17 Vulnerable
GHSA-7j34-xq9v-9mqg Aliases: CVE-2020-0827	Out-of-bounds write in ChakraCore A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects …	1.11.17 Vulnerable
GHSA-g644-6fg4-hrh9 Aliases: CVE-2020-0830	Out-of-bounds write in ChakraCore A remote code execution vulnerability exists in the way the scripting engine handles objects in memory …	1.11.17 Vulnerable
GHSA-88cw-3m6x-49f7 Aliases: CVE-2020-17054	Out-of-bounds Write in ChakraCore Chakra Scripting Engine Memory Corruption Vulnerability This CVE ID is unique from CVE-2020-17048.	1.11.23 Vulnerable
GHSA-wc43-7wj6-4ggr Aliases: CVE-2020-1180	Remote code execution in ChakraCore A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles …	1.11.22 Vulnerable
GHSA-xxfr-jrgh-x392 Aliases: CVE-2020-1172	Remote code execution in ChakraCore A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles …	1.11.22 Vulnerable
GHSA-9f8c-f7h4-xghf Aliases: CVE-2020-1057	Remote code execution in ChakraCore A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles …	1.11.22 Vulnerable
GHSA-pfrg-w49c-8432 Aliases: CVE-2020-0768	Out-of-bounds write in ChakraCore A remote code execution vulnerability exists in the way the scripting engine handles objects in memory …	1.11.17 Vulnerable
GHSA-vpc2-7xmf-ppmf Aliases: CVE-2020-17048	Out-of-bounds Write in ChakraCore Chakra Scripting Engine Memory Corruption Vulnerability This CVE ID is unique from CVE-2020-17054.	1.11.23 Vulnerable
GHSA-vw2g-5827-m9fp Aliases: CVE-2019-1308	Out-of-bounds write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory …	1.11.14 Vulnerable
GHSA-6j89-jhpr-849f Aliases: CVE-2019-1307	Out-of-bounds write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory …	1.11.14 Vulnerable
GHSA-2wwc-w2gw-4329 Aliases: CVE-2019-1366	Out-of-bounds write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory …	1.11.14 Vulnerable
GHSA-p23j-g745-8449 Aliases: CVE-2019-1335	Out-of-bounds write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory …	1.11.14 Vulnerable
GHSA-2452-3rwv-x89c Aliases: CVE-2019-1298	Out-of-bounds write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory …	1.11.13 Vulnerable
GHSA-pcgf-qjx2-qv4q Aliases: CVE-2019-1217	Out-of-bounds write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory …	1.11.13 Vulnerable
GHSA-q99r-j969-6jwr Aliases: CVE-2019-1237	Out-of-bounds write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory …	1.11.13 Vulnerable
GHSA-grvw-q343-58wh Aliases: CVE-2019-1300	Out-of-bounds write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory …	1.11.13 Vulnerable
GHSA-jr84-p554-62pm Aliases: CVE-2020-0969	ChakraCore RCE Vulnerability A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in …	1.11.18 Vulnerable
GHSA-233h-59m2-qqf2 Aliases: CVE-2020-0970	ChakraCore Remote Code Execution Vulnerability A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles …	1.11.18 Vulnerable
GHSA-g67x-mgrv-m3gv Aliases: CVE-2020-0812	ChakraCore RCE Vulnerability A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in …	1.11.17 Vulnerable
GHSA-fhc8-h6hr-h9mq Aliases: CVE-2020-0767	ChakraCore RCE Vulnerability A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in …	1.11.16 Vulnerable
GHSA-9hjg-j983-mqcc Aliases: CVE-2020-1065	ChakraCore RCE Vulnerability A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in …	1.11.19 Vulnerable
GHSA-vvvh-5xrm-pxff Aliases: CVE-2020-0813	ChakraCore information disclosure vulnerability An information disclosure vulnerability exists when Chakra improperly discloses the contents of its memory, which could …	1.11.17 Vulnerable
GHSA-w6qf-35f2-j6h7 Aliases: CVE-2020-0712	ChakraCore RCE Vulnerability A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in …	1.11.16 Vulnerable
GHSA-63fw-7jgf-5hwv Aliases: CVE-2020-0711	ChakraCore RCE Vulnerability A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in …	1.11.16 Vulnerable
GHSA-pg99-mp4c-75g6 Aliases: CVE-2020-0811	ChakraCore RCE Vulnerability A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in …	1.11.17 Vulnerable
GHSA-8xv4-c7rq-j577 Aliases: CVE-2020-1037	ChakraCore Remote Code Execution Vulnerability A remote code execution vulnerability exists in the way that the Chakra scripting engine handles …	1.11.19 Vulnerable
GHSA-g6mc-8679-ghx9 Aliases: CVE-2020-0713	ChakraCore RCE Vulnerability A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in …	1.11.16 Vulnerable
GHSA-g3m9-qrfj-xw4g Aliases: CVE-2020-1073	ChakraCore RCE Vulnerability A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in …	1.11.20 Vulnerable
GHSA-jgrp-6qqq-3284 Aliases: CVE-2021-42279	Chakra Scripting Engine and ChakraCore Vulnerable to Memory Corruption Chakra Scripting Engine and ChakraCore are vulnerable to memory corruption due …	There are no reported fixed by versions.
GHSA-67xp-4726-4978 Aliases: CVE-2020-0710	ChakraCore RCE Vulnerability A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in …	1.11.16 Vulnerable
CVE-2018-0762	Out-of-bounds Write Internet Explorer in Microsoft Windows 7 SP1, Windows Server and R2 SP1, Windows and Windows RT, Windows Server …	1.7.6 Vulnerable
CVE-2019-0651	Out-of-bounds Write A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in …	1.11.6 Vulnerable
CVE-2018-0954	Out-of-bounds Write A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft …	1.8.3 Vulnerable
CVE-2018-8229	Access of Resource Using Incompatible Type ('Type Confusion') A remote code execution vulnerability exists in the way that the Chakra …	1.8.4 Vulnerable
CVE-2018-0769	Out-of-bounds Write Microsoft Edge in Windows Gold, and Windows Server allows an attacker to execute arbitrary code in the context …	1.7.6 Vulnerable
CVE-2018-0758	Out-of-bounds Write Microsoft Edge in Windows Gold, and Windows Server allows an attacker to execute arbitrary code in the context …	1.7.6 Vulnerable
CVE-2019-0590	Out-of-bounds Write A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in …	1.11.6 Vulnerable
CVE-2018-0777	Out-of-bounds Write Microsoft Edge in Windows Gold, and Windows Server allows an attacker to execute arbitrary code in the context …	1.7.6 Vulnerable
CVE-2019-0739	Out-of-bounds Write A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in …	1.11.8 Vulnerable
CVE-2018-0774	Out-of-bounds Write Microsoft Edge in Windows allows an attacker to execute arbitrary code in the context of the current user, …	1.7.6 Vulnerable
CVE-2018-0800	Exposure of Sensitive Information to an Unauthorized Actor Microsoft Edge in Microsoft Windows allows an attacker to obtain information to …	1.7.6 Vulnerable
CVE-2018-8286	Out-of-bounds Write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory …	1.10.0 Vulnerable
CVE-2018-0770	Out-of-bounds Write Microsoft Edge in Windows Gold, and Windows Server allows an attacker to execute arbitrary code in the context …	1.7.6 Vulnerable
CVE-2018-0778	Out-of-bounds Write Microsoft Edge in Windows allows an attacker to execute arbitrary code in the context of the current user, …	1.7.6 Vulnerable
CVE-2018-0953	Out-of-bounds Write A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in …	1.8.3 Vulnerable
CVE-2018-0772	Out-of-bounds Write Internet Explorer in Microsoft Windows 7 SP1, Windows Server and R2 SP1, Windows and Windows RT, Windows Server …	1.7.6 Vulnerable
CVE-2020-1037	Improper Restriction of Operations within the Bounds of a Memory Buffer A remote code execution vulnerability exists in the way …	1.11.18 Vulnerable
CVE-2020-1219	Improper Restriction of Operations within the Bounds of a Memory Buffer A remote code execution vulnerability exists in the way …	1.11.20 Vulnerable
CVE-2018-8459	Out-of-bounds Write A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, …	1.10.1 Vulnerable
CVE-2019-0605	Out-of-bounds Write A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in …	1.11.6 Vulnerable
CVE-2018-8290	Out-of-bounds Write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory …	1.10.0 Vulnerable
CVE-2019-0607	Out-of-bounds Write A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in …	1.11.6 Vulnerable
CVE-2018-8178	Out-of-bounds Write A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory, aka "Microsoft …	1.8.3 Vulnerable
CVE-2019-1426	Out-of-bounds Write A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in …	1.11.15 Vulnerable
CVE-2018-0776	Out-of-bounds Write Microsoft Edge in Windows Gold, and Windows Server allows an attacker to execute arbitrary code in the context …	1.7.6 Vulnerable
CVE-2019-0658	Privilege Escalation An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory in Microsoft …	1.11.6 Vulnerable
CVE-2018-8130	Out-of-bounds Write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory …	1.8.3 Vulnerable
CVE-2018-8227	Out-of-bounds Write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory …	1.8.4 Vulnerable
CVE-2018-8128	Out-of-bounds Write A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in …	1.8.3 Vulnerable
CVE-2018-8280	Out-of-bounds Write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory …	1.10.0 Vulnerable
CVE-2018-8133	Access of Resource Using Incompatible Type ('Type Confusion') A remote code execution vulnerability exists in the way that the Chakra …	1.8.3 Vulnerable
CVE-2018-0773	Out-of-bounds Write Microsoft Edge in Windows allows an attacker to execute arbitrary code in the context of the current user, …	1.7.6 Vulnerable
CVE-2019-0644	Out-of-bounds Write A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in …	1.11.6 Vulnerable
CVE-2018-0767	Out-of-bounds Read Microsoft Edge in Microsoft Windows, and Windows Server allows an attacker to obtain information to further compromise the …	1.7.6 Vulnerable
CVE-2018-0775	Out-of-bounds Write Microsoft Edge in Windows allows an attacker to execute arbitrary code in the context of the current user, …	1.7.6 Vulnerable
CVE-2019-1001	Out-of-bounds Write A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft …	1.11.11 Vulnerable
CVE-2018-8279	Access of Resource Using Incompatible Type ('Type Confusion') A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects …	1.10.0 Vulnerable
CVE-2017-11930	Improper Restriction of Operations within the Bounds of a Memory Buffer ChakraCore, and Internet Explorer in Microsoft Windows 7 SP1, …	1.7.5 Vulnerable
CVE-2019-0593	Out-of-bounds Write A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in …	1.11.6 Vulnerable
CVE-2019-0591	Out-of-bounds Write A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in …	1.11.6 Vulnerable
CVE-2019-1023	Exposure of Sensitive Information to an Unauthorized Actor An information disclosure vulnerability exists when the scripting engine does not properly …	1.11.10 Vulnerable
CVE-2018-8275	Out-of-bounds Write A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory …	1.10.0 Vulnerable
CVE-2020-0878	A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory, aka 'Microsoft Browser Memory …	1.11.22 Vulnerable
CVE-2019-1427	Out-of-bounds Write A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in …	1.11.15 Vulnerable
CVE-2019-0610	Out-of-bounds Write A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in …	1.11.6 Vulnerable
CVE-2018-0780	Out-of-bounds Read Microsoft Edge in Microsoft Windows Gold, and Windows Server allows an attacker to obtain information to further compromise …	1.7.6 Vulnerable
CVE-2018-8137	Out-of-bounds Write A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in …	1.8.3 Vulnerable
CVE-2018-0946	Out-of-bounds Write A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in …	1.8.3 Vulnerable
CVE-2018-0768	Out-of-bounds Write Microsoft Edge in Windows allows an attacker to execute arbitrary code in the context of the current user, …	1.7.6 Vulnerable
CVE-2018-0945	Out-of-bounds Write A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in …	1.8.3 Vulnerable
CVE-2019-0652	Out-of-bounds Write A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in …	1.11.6 Vulnerable
CVE-2019-0642	Out-of-bounds Write A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in …	1.11.6 Vulnerable
CVE-2019-0990	Exposure of Sensitive Information to an Unauthorized Actor An information disclosure vulnerability exists when the scripting engine does not properly …	1.11.10 Vulnerable
CVE-2019-0655	Out-of-bounds Write A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in …	1.11.6 Vulnerable
CVE-2017-11918	Improper Restriction of Operations within the Bounds of a Memory Buffer ChakraCore and Microsoft Edge in Windows Gold, and Windows …	1.7.5 Vulnerable
CVE-2019-0640	Out-of-bounds Write A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in …	1.11.6 Vulnerable
CVE-2018-8294	Out-of-bounds Write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory …	1.10.0 Vulnerable
CVE-2019-1428	Out-of-bounds Write A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in …	1.11.15 Vulnerable
CVE-2017-11919	Exposure of Sensitive Information to an Unauthorized Actor ChakraCore, and Internet Explorer in Microsoft Windows 7 SP1, Windows Server R2 …	1.7.5 Vulnerable
CVE-2017-11912	Improper Restriction of Operations within the Bounds of a Memory Buffer ChakraCore, and Internet Explorer in Microsoft Windows 7 SP1, …	1.7.5 Vulnerable
CVE-2018-0781	Out-of-bounds Write Microsoft Edge in Windows Gold, and Windows Server allows an attacker to execute arbitrary code in the context …	1.7.6 Vulnerable
CVE-2018-8139	Out-of-bounds Read A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in …	1.8.3 Vulnerable
CVE-2018-8177	Out-of-bounds Write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory …	1.8.3 Vulnerable
CVE-2018-0943	Out-of-bounds Write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory …	1.8.3 Vulnerable
CVE-2018-1022	Out-of-bounds Write A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft …	1.8.3 Vulnerable
GHSA-hrmm-f4j8-8vxc Aliases: CVE-2019-0922	Out-of-bounds write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory …	1.11.9 Vulnerable 1.11.9 Vulnerable
GHSA-h23m-w6x5-jwr4 Aliases: CVE-2019-0923	Out-of-bounds write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory …	1.11.9 Vulnerable 1.11.9 Vulnerable
GHSA-cwp9-956f-vcwh Aliases: CVE-2019-1141	Out-of-bounds write in Microsoft.ChakraCore A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects …	1.11.12 Vulnerable 1.11.12 Vulnerable
GHSA-mw7r-3g6w-85qg Aliases: CVE-2019-1131	Out-of-bounds write in Microsoft.ChakraCore A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects …	1.11.12 Vulnerable 1.11.12 Vulnerable
GHSA-9qw8-ccq9-ffj9 Aliases: CVE-2019-1139	Out-of-bounds write in Microsoft.ChakraCore A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects …	1.11.12 Vulnerable 1.11.12 Vulnerable
GHSA-758c-g2ff-9444 Aliases: CVE-2019-1140	Out-of-bounds write in Microsoft.ChakraCore A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects …	1.11.12 Vulnerable 1.11.12 Vulnerable
GHSA-rx34-jff5-ph35 Aliases: CVE-2019-0917	Out-of-bounds write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory …	1.11.9 Vulnerable 1.11.9 Vulnerable
GHSA-53r4-h27g-rg3x Aliases: CVE-2019-0992	Chakra Scripting Engine Out-of-bounds write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles …	1.11.10 Vulnerable 1.11.10 Vulnerable
GHSA-mg98-x2cm-4cpf Aliases: CVE-2019-1106	Out-of-bounds write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory …	1.11.11 Vulnerable 1.11.11 Vulnerable
GHSA-2rfj-2mwp-787v Aliases: CVE-2019-0993	Chakra Scripting Engine Out-of-bounds write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles …	1.11.10 Vulnerable 1.11.10 Vulnerable
GHSA-rh4p-g7x6-8pqg Aliases: CVE-2019-1062	Out-of-bounds write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory …	1.11.11 Vulnerable 1.11.11 Vulnerable
GHSA-v89p-5hr2-4rh4 Aliases: CVE-2019-1197	Out-of-bounds write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory …	1.11.12 Vulnerable 1.11.12 Vulnerable
GHSA-pwpr-vp2v-99xw Aliases: CVE-2019-1138	Out-of-bounds write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory …	1.11.13 Vulnerable 1.11.13 Vulnerable
GHSA-2x75-mf24-588m Aliases: CVE-2019-1092	Out-of-bounds write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory …	1.11.11 Vulnerable 1.11.11 Vulnerable
GHSA-7423-5qfm-g648 Aliases: CVE-2019-0916	Out-of-bounds write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory …	1.11.9 Vulnerable 1.11.9 Vulnerable
GHSA-5rcr-q3rx-j7vr Aliases: CVE-2019-1107	Out-of-bounds write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory …	1.11.11 Vulnerable 1.11.11 Vulnerable
GHSA-vmf5-924f-25f2 Aliases: CVE-2019-1103	Out-of-bounds write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory …	1.11.11 Vulnerable 1.11.11 Vulnerable
GHSA-fm9p-5m9f-rq85 Aliases: CVE-2019-0915	Out-of-bounds write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory …	1.11.9 Vulnerable 1.11.9 Vulnerable
GHSA-ppxc-pmx9-qjv9 Aliases: CVE-2019-1195	Out-of-bounds write in Microsoft.ChakraCore A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects …	1.11.12 Vulnerable 1.11.12 Vulnerable
GHSA-w89r-qch4-8jv5 Aliases: CVE-2019-0912	Out-of-bounds write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory …	1.11.9 Vulnerable 1.11.9 Vulnerable
GHSA-9824-rp6m-xx9w Aliases: CVE-2019-0989	Chakra Scripting Engine Memory Corruption Vulnerability A remote code execution vulnerability exists in the way that the Chakra scripting engine …	1.11.10 Vulnerable 1.11.10 Vulnerable
GHSA-hfm2-fffh-v47v Aliases: CVE-2019-1196	Out-of-bounds write in ChakraCore A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects …	1.11.12 Vulnerable 1.11.12 Vulnerable
GHSA-9735-p6r2-2hgh Aliases: CVE-2019-0911	Out-of-bounds write A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft …	1.11.9 Vulnerable 1.11.9 Vulnerable
GHSA-h6wf-hvwc-fm77 Aliases: CVE-2019-0914	Out-of-bounds write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory …	1.11.9 Vulnerable 1.11.9 Vulnerable
GHSA-37pf-w9ff-gqvm Aliases: CVE-2019-0927	Out-of-bounds write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory …	1.11.9 Vulnerable 1.11.9 Vulnerable
GHSA-5rq8-3wvf-wrfg Aliases: CVE-2019-0933	Out-of-bounds write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory …	1.11.9 Vulnerable 1.11.9 Vulnerable
GHSA-v648-p92f-9996 Aliases: CVE-2019-0925	Out-of-bounds write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory …	1.11.9 Vulnerable 1.11.9 Vulnerable
GHSA-6973-94v8-5mgw Aliases: CVE-2019-0991	Chakra Scripting Engine Out-of-bounds write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles …	1.11.10 Vulnerable 1.11.10 Vulnerable
GHSA-59cj-99cw-rq64 Aliases: CVE-2019-0913	Out-of-bounds write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory …	1.11.9 Vulnerable 1.11.9 Vulnerable
GHSA-prxj-c66c-4gcf Aliases: CVE-2019-0924	Out-of-bounds write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory …	1.11.9 Vulnerable 1.11.9 Vulnerable
GHSA-w32p-76xr-88pc Aliases: CVE-2019-1003	Chakra Scripting Engine Out-of-bounds write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles …	1.11.10 Vulnerable 1.11.10 Vulnerable
GHSA-8gvg-8vhf-h26g Aliases: CVE-2019-0937	Out-of-bounds write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory …	1.11.9 Vulnerable 1.11.9 Vulnerable
GHSA-85j8-g29g-m326 Aliases: CVE-2018-8371	ChakraCore RCE Vulnerability A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory …	1.10.1 Vulnerable 1.10.1 Vulnerable
GHSA-phcc-frh9-q545 Aliases: CVE-2018-0934	ChakraCore RCE Vulnerability ChakraCore and Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code …	1.8.2 Vulnerable 1.8.2 Vulnerable
GHSA-9qpf-v72j-j9qh Aliases: CVE-2017-11909	ChakraCore vulnerable to remote code execution ChakraCore and Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an …	1.7.5 Vulnerable 1.7.5 Vulnerable
GHSA-fw42-4mq4-4qpq Aliases: CVE-2018-8500	ChakraCore RCE Vulnerability A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in …	1.11.2 Vulnerable 1.11.2 Vulnerable
GHSA-67f9-qmg7-fmcq Aliases: CVE-2018-0874	ChakraCore RCE Vulnerability ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 …	1.8.2 Vulnerable 1.8.2 Vulnerable
GHSA-mjg2-326q-49f9 Aliases: CVE-2018-8551	ChakraCore RCE Vulnerability A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in …	1.11.3 Vulnerable 1.11.3 Vulnerable
GHSA-p349-q795-qj4q Aliases: CVE-2018-8372	ChakraCore RCE Vulnerability A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in …	1.10.2 Vulnerable 1.10.2 Vulnerable
GHSA-w4qx-vw2w-q566 Aliases: CVE-2018-8243	ChakraCore RCE Vulnerability A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in …	1.8.5 Vulnerable 1.8.5 Vulnerable
GHSA-m8x8-5ch7-c5w9 Aliases: CVE-2018-0836	ChakraCore RCE Vulnerability Microsoft Edge and ChakraCore in Microsoft Windows 10 1703 and 1709 allows remote code execution, due to …	1.8.1 Vulnerable 1.8.1 Vulnerable
GHSA-6x4f-5v4h-r29j Aliases: CVE-2019-0567	ChakraCore RCE Vulnerability A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in …	1.11.5 Vulnerable 1.11.5 Vulnerable
GHSA-ggvv-6v25-r49r Aliases: CVE-2018-8384	ChakraCore RCE Vulnerability A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in …	1.10.2 Vulnerable 1.10.2 Vulnerable
GHSA-prhh-h793-h32r Aliases: CVE-2018-1019	ChakraCore RCE Vulnerability A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in …	1.8.3 Vulnerable 1.8.3 Vulnerable
GHSA-735f-mx7h-46w8 Aliases: CVE-2017-11910	ChakraCore vulnerable to remote code execution due to insufficient InlineCache check ChakraCore and Windows 10 Gold, 1511, 1607, 1703, 1709, …	1.7.5 Vulnerable 1.7.5 Vulnerable
GHSA-8rqh-8726-83h7 Aliases: CVE-2018-8133	ChakraCore RCE Vulnerability A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in …	1.8.4 Vulnerable 1.8.4 Vulnerable
GHSA-rhvg-r9fw-9wqj Aliases: CVE-2018-8557	ChakraCore RCE Vulnerability A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in …	1.11.3 Vulnerable 1.11.3 Vulnerable
GHSA-fxrx-5j36-pwg5 Aliases: CVE-2019-1051	Chakra Scripting Engine RCE via Out-of-bounds write A remote code execution vulnerability exists in the way that the Chakra scripting …	1.11.10 Vulnerable 1.11.10 Vulnerable
GHSA-38r7-rv5p-ggwq Aliases: CVE-2018-8359	ChakraCore RCE Vulnerability A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in …	1.10.2 Vulnerable 1.10.2 Vulnerable
GHSA-h5hw-qrrw-vfxg Aliases: CVE-2018-0954	ChakraCore RCE Vulnerability A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in …	1.8.4 Vulnerable 1.8.4 Vulnerable
GHSA-xxp7-423f-hcp4 Aliases: CVE-2018-8467	ChakraCore RCE Vulnerability A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in …	1.11.1 Vulnerable 1.11.1 Vulnerable
GHSA-25vh-gq6v-hrx5 Aliases: CVE-2018-0979	ChakraCore RCE Vulnerability A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in …	1.8.3 Vulnerable 1.8.3 Vulnerable
GHSA-h575-j3ph-hjvc Aliases: CVE-2018-0931	ChakraCore RCE Vulnerability ChakraCore and Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code …	1.8.2 Vulnerable 1.8.2 Vulnerable
GHSA-wg47-6cqc-q52j Aliases: CVE-2018-8276	ChakraCore Security Bypass A security feature bypass vulnerability exists in the Microsoft Chakra scripting engine that allows Control Flow Guard …	1.10.1 Vulnerable 1.10.1 Vulnerable
GHSA-wwm6-r38h-ppg7 Aliases: CVE-2018-8280	ChakraCore RCE Vulnerability A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in …	1.10.1 Vulnerable 1.10.1 Vulnerable
GHSA-5ggm-q98v-76hx Aliases: CVE-2018-8618	ChakraCore RCE Vulnerability A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in …	1.11.4 Vulnerable 1.11.4 Vulnerable
GHSA-923j-972p-hchf Aliases: CVE-2017-11908	ChakraCore RCE Vulnerability ChakraCore and Windows 10 1709 allows an attacker to execute arbitrary code in the context of the …	1.7.5 Vulnerable 1.7.5 Vulnerable
GHSA-399v-jg88-3gx6 Aliases: CVE-2018-0856	ChakraCore RCE Vulnerability Microsoft Edge and ChakraCore in Microsoft Windows 10 1703 and 1709 allows remote code execution, due to …	1.8.1 Vulnerable 1.8.1 Vulnerable
GHSA-7724-427r-8rvm Aliases: CVE-2018-0943	ChakraCore RCE Vulnerability A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in …	1.8.4 Vulnerable 1.8.4 Vulnerable
GHSA-h9wf-mpvf-9jqg Aliases: CVE-2018-0837	ChakraCore RCE Vulnerability Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 …	1.8.1 Vulnerable 1.8.1 Vulnerable
GHSA-p9qf-56xw-h2vj Aliases: CVE-2018-8617	ChakraCore RCE Vulnerability A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in …	1.11.3 Vulnerable 1.11.3 Vulnerable
GHSA-hg36-rmmm-hc5r Aliases: CVE-2019-0806	ChakraCore RCE Vulnerability A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in …	1.11.8 Vulnerable 1.11.8 Vulnerable
GHSA-fv87-p7qr-xh5x Aliases: CVE-2019-0860	ChakraCore Memory Corruption Vulnerability A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects …	1.11.8 Vulnerable 1.11.8 Vulnerable
GHSA-gxxx-j8m7-hh7m Aliases: CVE-2018-8294	ChakraCore RCE Vulnerability A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in …	1.10.1 Vulnerable 1.10.1 Vulnerable
GHSA-3hqw-mg9x-r2vr Aliases: CVE-2018-8513	ChakraCore RCE Vulnerability A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in …	1.11.2 Vulnerable 1.11.2 Vulnerable
GHSA-5f5r-65pm-r3wr Aliases: CVE-2017-11916	ChakraCore RCE Vulnerability ChakraCore allows an attacker to execute arbitrary code in the context of the current user, due to …	1.7.5 Vulnerable 1.7.5 Vulnerable
GHSA-3j65-2jcq-w9fr Aliases: CVE-2018-0933	ChakraCore RCE Vulnerability ChakraCore and Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code …	1.8.2 Vulnerable 1.8.2 Vulnerable
GHSA-3mv8-x3jj-3j7m Aliases: CVE-2018-8511	ChakraCore RCE Vulnerability A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in …	1.11.2 Vulnerable 1.11.2 Vulnerable
GHSA-ch84-pxpj-7hhm Aliases: CVE-2018-8283	ChakraCore RCE Vulnerability A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in …	1.10.1 Vulnerable 1.10.1 Vulnerable
GHSA-6xmv-mx7q-789r Aliases: CVE-2018-8456	ChakraCore RCE Vulnerability A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in …	1.11.1 Vulnerable 1.11.1 Vulnerable
GHSA-w9rv-wwxr-vc3q Aliases: CVE-2018-8629	ChakraCore RCE Vulnerability A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in …	1.11.4 Vulnerable 1.11.4 Vulnerable
GHSA-wc4x-9h9p-9494 Aliases: CVE-2018-0930	ChakraCore RCE Vulnerability ChakraCore and Microsoft Edge in Microsoft Windows 10 1709 allows remote code execution, due to how the …	1.8.2 Vulnerable 1.8.2 Vulnerable
GHSA-q4qj-2f5m-98gc Aliases: CVE-2018-8583	ChakraCore RCE Vulnerability A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in …	1.11.3 Vulnerable 1.11.3 Vulnerable
GHSA-2mmc-5phj-4wjj Aliases: CVE-2019-0810	ChakraCore RCE Vulnerability A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in …	1.11.8 Vulnerable 1.11.8 Vulnerable
GHSA-rpfg-xf88-cq5r Aliases: CVE-2019-0812	ChakraCore RCE Vulnerability A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in …	1.11.8 Vulnerable 1.11.8 Vulnerable
GHSA-mm5q-x9qg-x4vp Aliases: CVE-2018-8465	ChakraCore RCE Vulnerability A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in …	1.11.1 Vulnerable 1.11.1 Vulnerable
GHSA-q9x6-7hjh-q9fc Aliases: CVE-2018-0857	ChakraCore RCE Vulnerability Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 …	1.8.1 Vulnerable 1.8.1 Vulnerable
GHSA-p37h-rg3w-23wx Aliases: CVE-2018-8505	ChakraCore RCE Vulnerability A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in …	1.11.2 Vulnerable 1.11.2 Vulnerable
GHSA-5hxp-3237-j2hp Aliases: CVE-2018-8139	ChakraCore RCE Vulnerability A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory …	1.8.4 Vulnerable 1.8.4 Vulnerable
GHSA-xmvg-c4x3-9qwp Aliases: CVE-2018-0980	ChakraCore RCE Vulnerability A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in …	1.8.3 Vulnerable 1.8.3 Vulnerable
GHSA-6c2v-xc8f-fvf7 Aliases: CVE-2018-0937	ChakraCore RCE Vulnerability ChakraCore and Microsoft Windows 10 1703 and 1709 allow remote code execution, due to how the Chakra …	1.8.2 Vulnerable 1.8.2 Vulnerable
GHSA-5j48-826p-2w9r Aliases: CVE-2018-0834	ChakraCore RCE Vulnerability Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 …	1.8.1 Vulnerable 1.8.1 Vulnerable
GHSA-2589-r26x-mh8p Aliases: CVE-2018-8503	ChakraCore RCE Vulnerability A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in …	1.11.2 Vulnerable 1.11.2 Vulnerable
GHSA-xphq-3x6q-q2qq Aliases: CVE-2018-8145	ChakraCore information disclosure vulnerability An information disclosure vulnerability exists when Chakra improperly discloses the contents of its memory, which could …	1.8.4 Vulnerable 1.8.4 Vulnerable
GHSA-7c7v-g484-j4cf Aliases: CVE-2018-0993	ChakraCore RCE Vulnerability A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in …	1.8.3 Vulnerable 1.8.3 Vulnerable
GHSA-qfcq-4vv7-9mq7 Aliases: CVE-2017-11911	ChakraCore RCE Vulnerability ChakraCore and Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute …	1.7.5 Vulnerable 1.7.5 Vulnerable
GHSA-788w-269g-j92q Aliases: CVE-2018-8391	ChakraCore RCE Vulnerability A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in …	1.11.1 Vulnerable 1.11.1 Vulnerable
GHSA-67x3-36j7-pj4g Aliases: CVE-2018-8385	ChakraCore RCE Vulnerability A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in …	1.10.2 Vulnerable 1.10.2 Vulnerable
GHSA-72gm-pp6q-gpx5 Aliases: CVE-2017-11905	ChakraCore RCE Vulnerability ChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an …	1.7.5 Vulnerable 1.7.5 Vulnerable
GHSA-gqh4-4r89-pr95 Aliases: CVE-2018-8227	ChakraCore RCE Vulnerability A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in …	1.8.5 Vulnerable 1.8.5 Vulnerable
GHSA-qxmj-3c5h-546c Aliases: CVE-2019-0861	ChakraCore Memory Corruption Vulnerability A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects …	1.11.8 Vulnerable 1.11.8 Vulnerable
GHSA-c6mx-gwgr-mfm2 Aliases: CVE-2018-0995	ChakraCore RCE Vulnerability A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in …	1.8.3 Vulnerable 1.8.3 Vulnerable
GHSA-vgxq-xv7f-jxjx Aliases: CVE-2018-8290	ChakraCore RCE Vulnerability A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in …	1.10.1 Vulnerable 1.10.1 Vulnerable
GHSA-h8jq-5737-hpcf Aliases: CVE-2018-8355	ChakraCore RCE Vulnerability A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in …	1.10.2 Vulnerable 1.10.2 Vulnerable
GHSA-g549-jfg6-98ch Aliases: CVE-2018-0994	ChakraCore RCE Vulnerability A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in …	1.8.3 Vulnerable 1.8.3 Vulnerable
GHSA-5wrx-85mr-7hrg Aliases: CVE-2018-8266	ChakraCore RCE Vulnerability A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in …	1.10.2 Vulnerable 1.10.2 Vulnerable
GHSA-6c6r-39cv-x5fq Aliases: CVE-2019-0649	Chakra JIT server Privilege Escalation A vulnerability exists in Microsoft Chakra JIT server, aka 'Scripting Engine Elevation of Privileges Vulnerability'.	1.11.6 Vulnerable 1.11.6 Vulnerable
GHSA-fv8m-p45w-gf38 Aliases: CVE-2018-0818	ChakraCore RCE Vulnerability Microsoft ChakraCore allows an attacker to bypass Control Flow Guard (CFG) in conjunction with another vulnerability to …	1.8.0 Vulnerable 1.8.0 Vulnerable
GHSA-6g23-fww6-rfrj Aliases: CVE-2018-8354	ChakraCore RCE Vulnerability A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory …	1.11.1 Vulnerable 1.11.1 Vulnerable
GHSA-3cwf-pwcg-57xr Aliases: CVE-2018-0835	ChakraCore RCE Vulnerability Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 …	1.8.1 Vulnerable 1.8.1 Vulnerable
GHSA-c6r3-ghjw-hgrj Aliases: CVE-2017-11893	ChakraCore vulnerable to remote code execution ChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, and Windows Server …	1.7.5 Vulnerable 1.7.5 Vulnerable
GHSA-8r5c-8v97-g7vh Aliases: CVE-2017-11914	ChakraCore vulnerable to privilege escalation due to exposure from scriptFunction ChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, …	1.7.5 Vulnerable 1.7.5 Vulnerable
GHSA-wc52-2xwv-h7xr Aliases: CVE-2018-0873	ChakraCore RCE Vulnerability ChakraCore and Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows …	1.8.2 Vulnerable 1.8.2 Vulnerable
GHSA-frh8-wrx9-gc53 Aliases: CVE-2018-8137	ChakraCore RCE Vulnerability A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory …	1.8.4 Vulnerable 1.8.4 Vulnerable
GHSA-3w4v-qfqc-3433 Aliases: CVE-2019-0539	ChakraCore RCE Vulnerability A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in …	1.11.5 Vulnerable 1.11.5 Vulnerable
GHSA-93c7-2942-3h47 Aliases: CVE-2018-8315	ChakraCore information disclosure vulnerability An information disclosure vulnerability exists when the browser scripting engine improperly handle object types, aka "Microsoft …	1.11.1 Vulnerable 1.11.1 Vulnerable
GHSA-79xq-c7xr-29jh Aliases: CVE-2018-8541	ChakraCore RCE Vulnerability A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in …	1.11.3 Vulnerable 1.11.3 Vulnerable
GHSA-5439-x5v5-2vhj Aliases: CVE-2018-0945	ChakraCore RCE Vulnerability A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory …	1.8.4 Vulnerable 1.8.4 Vulnerable
GHSA-7gjv-9m33-chg8 Aliases: CVE-2018-0858	ChakraCore RCE Vulnerability ChakraCore allows remote code execution, due to how the ChakraCore scripting engine handles objects in memory, aka …	1.8.1 Vulnerable 1.8.1 Vulnerable
GHSA-wjmf-6x7g-xq67 Aliases: CVE-2018-1022	ChakraCore RCE Vulnerability A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in …	1.8.4 Vulnerable 1.8.4 Vulnerable
GHSA-h9h7-4jfm-3fxr Aliases: CVE-2018-0872	ChakraCore RCE Vulnerability ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 …	1.8.2 Vulnerable 1.8.2 Vulnerable
GHSA-v3xp-3wpq-rvhp Aliases: CVE-2018-0860	ChakraCore RCE Vulnerability Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 …	1.8.1 Vulnerable 1.8.1 Vulnerable
GHSA-f3qw-7p9p-j87f Aliases: CVE-2018-8555	ChakraCore RCE Vulnerability A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in …	1.11.3 Vulnerable 1.11.3 Vulnerable
GHSA-h9cr-2hcf-cg8p Aliases: CVE-2018-8543	ChakraCore RCE Vulnerability A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in …	1.11.3 Vulnerable 1.11.3 Vulnerable
GHSA-j762-mr2c-fmp9 Aliases: CVE-2018-0838	ChakraCore RCE Vulnerability Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 …	1.8.1 Vulnerable 1.8.1 Vulnerable
GHSA-pcgp-vfgq-mf5j Aliases: CVE-2018-8459	ChakraCore RCE Vulnerability A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in …	1.11.1 Vulnerable 1.11.1 Vulnerable
GHSA-8f4c-h6m3-22rw Aliases: CVE-2018-8588	ChakraCore RCE Vulnerability A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in …	1.11.3 Vulnerable 1.11.3 Vulnerable
GHSA-fmv2-jv3p-6w47 Aliases: CVE-2018-8556	ChakraCore RCE Vulnerability A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in …	1.11.3 Vulnerable 1.11.3 Vulnerable
GHSA-v8jw-x9wq-hw4v Aliases: CVE-2019-1052	Chakra Scripting Engine RCE via Out-of-bounds write A remote code execution vulnerability exists in the way that the Chakra scripting …	1.11.10 Vulnerable 1.11.10 Vulnerable
GHSA-5q2v-52gc-4w7p Aliases: CVE-2018-0925	ChakraCore RCE Vulnerability ChakraCore allows remote code execution, due to how the ChakraCore scripting engine handles objects in memory, aka …	1.8.2 Vulnerable 1.8.2 Vulnerable
GHSA-2xrc-27mc-638q Aliases: CVE-2018-8624	ChakraCore Remote code execution Vulnerability A remote code execution vulnerability exists in the way that the Chakra scripting engine handles …	1.11.4 Vulnerable 1.11.4 Vulnerable
GHSA-vjf9-8wqg-xc7r Aliases: CVE-2018-8510	ChakraCore RCE Vulnerability A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in …	1.11.2 Vulnerable 1.11.2 Vulnerable
GHSA-3fvw-g6mr-w247 Aliases: CVE-2018-8130	ChakraCore RCE Vulnerability A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in …	1.8.4 Vulnerable 1.8.4 Vulnerable
GHSA-5rq3-9wc9-m9c3 Aliases: CVE-2019-0829	ChakraCore Memory Corruption Vulnerability A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects …	1.11.8 Vulnerable 1.11.8 Vulnerable
GHSA-6v8r-83v3-rmrf Aliases: CVE-2018-0936	ChakraCore RCE Vulnerability ChakraCore and Microsoft Windows 10 1709 allow remote code execution, due to how the Chakra scripting engine …	1.8.2 Vulnerable 1.8.2 Vulnerable
GHSA-6gj2-5366-p95v Aliases: CVE-2018-8381	ChakraCore RCE Vulnerability A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in …	1.10.2 Vulnerable 1.10.2 Vulnerable
GHSA-gxcf-6h72-8gxf Aliases: CVE-2018-8367	ChakraCore RCE Vulnerability A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in …	1.11.1 Vulnerable 1.11.1 Vulnerable
GHSA-2m5h-6g38-jjf2 Aliases: CVE-2019-0568	ChakraCore RCE Vulnerability A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in …	1.11.5 Vulnerable 1.11.5 Vulnerable
GHSA-4v6q-gjm6-6vv4 Aliases: CVE-2019-1002	ChakraCore RCE via Out-of-bounds write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles …	1.11.10 Vulnerable 1.11.10 Vulnerable
GHSA-9pvj-pgg9-pvqq Aliases: CVE-2018-0859	ChakraCore RCE Vulnerability Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 …	1.8.1 Vulnerable 1.8.1 Vulnerable
GHSA-g8q3-rcf9-qx4q Aliases: CVE-2019-1024	Chakra Scripting Engine RCE Vulnerability A remote code execution vulnerability exists in the way that the Chakra scripting engine handles …	1.11.10 Vulnerable 1.11.10 Vulnerable
GHSA-jv5x-p843-g4qr Aliases: CVE-2018-8229	ChakraCore RCE Vulnerability A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in …	1.8.5 Vulnerable 1.8.5 Vulnerable
GHSA-4f79-fxh8-vgq2 Aliases: CVE-2018-8288	ChakraCore RCE Vulnerability A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in …	1.10.1 Vulnerable 1.10.1 Vulnerable
GHSA-wc67-4cg3-35wf Aliases: CVE-2018-0946	ChakraCore RCE Vulnerability A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory …	1.8.4 Vulnerable 1.8.4 Vulnerable
GHSA-vh9x-fprq-2hhj Aliases: CVE-2018-0990	ChakraCore RCE Vulnerability A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in …	1.8.3 Vulnerable 1.8.3 Vulnerable
GHSA-w3qr-8v4r-592m Aliases: CVE-2018-8452	ChakraCore information disclosure vulnerability An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory …	1.11.1 Vulnerable 1.11.1 Vulnerable
GHSA-xgcc-r2f3-rq6p Aliases: CVE-2018-0939	ChakraCore information disclosure vulnerability ChakraCore and Microsoft Edge in Windows 10 1703 and 1709 allow information disclosure, due to how …	1.8.2 Vulnerable 1.8.2 Vulnerable
GHSA-wgw2-wwq8-c7wf Aliases: CVE-2018-8298	ChakraCore RCE Vulnerability A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in …	1.10.1 Vulnerable 1.10.1 Vulnerable
GHSA-jgj7-hq9p-rqmg Aliases: CVE-2018-8390	ChakraCore RCE Vulnerability A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in …	1.10.2 Vulnerable 1.10.2 Vulnerable
GHSA-j67m-wpv6-pv44 Aliases: CVE-2018-8291	ChakraCore RCE Vulnerability A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in …	1.10.1 Vulnerable 1.10.1 Vulnerable
GHSA-vwqh-cmvp-6694 Aliases: CVE-2018-8286	ChakraCore RCE Vulnerability A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in …	1.10.1 Vulnerable 1.10.1 Vulnerable
GHSA-rxg4-vw2v-rxm4 Aliases: CVE-2018-8380	ChakraCore remote code execution vulnerability A remote code execution vulnerability exists in the way that the Chakra scripting engine handles …	1.10.2 Vulnerable 1.10.2 Vulnerable
GHSA-wwfw-m54g-gv72 Aliases: CVE-2019-0648	ChakraCore information disclosure vulnerability An information disclosure vulnerability exists when Chakra improperly discloses the contents of its memory, which could …	1.11.6 Vulnerable 1.11.6 Vulnerable
GHSA-xw5f-g937-wgm2 Aliases: CVE-2017-11889	ChakraCore RCE Vulnerability ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows …	1.7.5 Vulnerable 1.7.5 Vulnerable
GHSA-4c93-q79v-mw45 Aliases: CVE-2018-8466	ChakraCore RCE Vulnerability A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in …	1.11.1 Vulnerable 1.11.1 Vulnerable
GHSA-hfhr-xxxq-vg7g Aliases: CVE-2018-8542	ChakraCore RCE Vulnerability A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in …	1.11.3 Vulnerable 1.11.3 Vulnerable
GHSA-p97q-j98q-f98w Aliases: CVE-2018-8287	ChakraCore RCE Vulnerability A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in …	1.10.1 Vulnerable 1.10.1 Vulnerable
GHSA-7cc5-cqmx-9v7g Aliases: CVE-2018-8177	ChakraCore RCE Vulnerability A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in …	1.8.4 Vulnerable 1.8.4 Vulnerable
GHSA-7ph8-f946-q5r7 Aliases: CVE-2019-0611	High severity vulnerability that affects Microsoft.ChakraCore A remote code execution vulnerability exists in the way that the Chakra scripting engine …	1.11.7 Vulnerable 1.11.7 Vulnerable
GHSA-8qh8-cv77-h83g Aliases: CVE-2019-0769	High severity vulnerability that affects Microsoft.ChakraCore A remote code execution vulnerability exists in the way that the scripting engine handles …	1.11.7 Vulnerable 1.11.7 Vulnerable
GHSA-fvpg-qx3g-7mp7 Aliases: CVE-2019-0771	High severity vulnerability that affects Microsoft.ChakraCore A remote code execution vulnerability exists in the way that the scripting engine handles …	1.11.7 Vulnerable 1.11.7 Vulnerable
GHSA-pjpj-f6r8-56rm Aliases: CVE-2019-0609	High severity vulnerability that affects Microsoft.ChakraCore A remote code execution vulnerability exists in the way the scripting engine handles objects …	1.11.7 Vulnerable 1.11.7 Vulnerable
GHSA-jhx3-2w5x-x39x Aliases: CVE-2019-0746	Microsoft.ChakraCore vulnerable to Exposure of Sensitive Information to an Unauthorized Actor An information disclosure vulnerability exists when the scripting engine …	1.11.7 Vulnerable 1.11.7 Vulnerable
GHSA-3w9q-c44j-37jj Aliases: CVE-2019-0773	High severity vulnerability that affects Microsoft.ChakraCore A remote code execution vulnerability exists in the way that the scripting engine handles …	1.11.7 Vulnerable 1.11.7 Vulnerable
GHSA-6jf5-rmhv-38cw Aliases: CVE-2019-0639	High severity vulnerability that affects Microsoft.ChakraCore A remote code execution vulnerability exists in the way that the ChakraCore scripting engine …	1.11.7 Vulnerable 1.11.7 Vulnerable
GHSA-fv38-4c3m-25v8 Aliases: CVE-2019-0592	High severity vulnerability that affects Microsoft.ChakraCore A remote code execution vulnerability exists in the way that the Chakra scripting engine …	1.11.7 Vulnerable 1.11.7 Vulnerable

Next non-vulnerable version	None.
Latest non-vulnerable version	None.
Risk score	10.0

Advisory	Summary	Aliases
GHSA-9f2p-wm46-6m5f	Chakra Core vulnerable to privilege escalation when writing to JavaScript null scope objects ChakraCore and Microsoft Edge in Windows 10 …	CVE-2017-11870
GHSA-43qp-hphf-5rjw	Chakra Core vulnerable to privilege escalation due to reading an invalid pointer ChakraCore and Microsoft Edge in Windows 10 1703, …	CVE-2017-11871
GHSA-pcr8-75v3-w9pf	Chakra Core vulnerable to privilege escalation due to type confusion ChakraCore and Microsoft Edge in Windows 10 1709 and Windows …	CVE-2017-11862