VulnerableCode Package Details - pkg:nuget/Microsoft.ChakraCore@1.11.12

Vulnerabilities affecting this package (48)

Advisory	Summary	Fixed in package version
GHSA-qwwg-gc55-qqrv Aliases: CVE-2020-17131	Out-of-bounds Write in Chakra Chakra Scripting Engine Memory Corruption Vulnerability	1.11.24 Vulnerable
GHSA-wvhv-rr3v-vhpj Aliases: CVE-2020-0823	Out-of-bounds write in ChakraCore A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects …	1.11.17 Vulnerable
GHSA-5p67-cp9c-hqw4 Aliases: CVE-2020-0848	Out-of-bounds write in ChakraCore A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects …	1.11.17 Vulnerable
GHSA-6cc6-66f5-mxjj Aliases: CVE-2020-0826	Out-of-bounds write in ChakraCore A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects …	1.11.17 Vulnerable
GHSA-2qgv-2cv4-g4cg Aliases: CVE-2020-0832	Out-of-bounds write in ChakraCore A remote code execution vulnerability exists in the way that the scripting engine handles objects in …	1.11.17 Vulnerable
GHSA-h2xm-2p6w-mj2v Aliases: CVE-2020-0831	Out-of-bounds Write in ChakraCore A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects …	1.11.17 Vulnerable
GHSA-c8qc-62qv-5p2x Aliases: CVE-2020-0828	Out-of-bounds Write in ChakraCore A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects …	1.11.17 Vulnerable
GHSA-86gw-g9jv-8vfg Aliases: CVE-2020-0833	Out-of-bounds write in ChakraCore A remote code execution vulnerability exists in the way that the scripting engine handles objects in …	1.11.17 Vulnerable
GHSA-j89m-gcjf-6ghp Aliases: CVE-2020-0825	Out-of-bounds write in ChakraCore A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects …	1.11.17 Vulnerable
GHSA-jv2c-mhcq-6wp4 Aliases: CVE-2020-0829	Out-of-bounds write in ChakraCore A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects …	1.11.17 Vulnerable
GHSA-7j34-xq9v-9mqg Aliases: CVE-2020-0827	Out-of-bounds write in ChakraCore A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects …	1.11.17 Vulnerable
GHSA-g644-6fg4-hrh9 Aliases: CVE-2020-0830	Out-of-bounds write in ChakraCore A remote code execution vulnerability exists in the way the scripting engine handles objects in memory …	1.11.17 Vulnerable
GHSA-88cw-3m6x-49f7 Aliases: CVE-2020-17054	Out-of-bounds Write in ChakraCore Chakra Scripting Engine Memory Corruption Vulnerability This CVE ID is unique from CVE-2020-17048.	1.11.23 Vulnerable
GHSA-wc43-7wj6-4ggr Aliases: CVE-2020-1180	Remote code execution in ChakraCore A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles …	1.11.22 Vulnerable
GHSA-xxfr-jrgh-x392 Aliases: CVE-2020-1172	Remote code execution in ChakraCore A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles …	1.11.22 Vulnerable
GHSA-9f8c-f7h4-xghf Aliases: CVE-2020-1057	Remote code execution in ChakraCore A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles …	1.11.22 Vulnerable
GHSA-pfrg-w49c-8432 Aliases: CVE-2020-0768	Out-of-bounds write in ChakraCore A remote code execution vulnerability exists in the way the scripting engine handles objects in memory …	1.11.17 Vulnerable
GHSA-vpc2-7xmf-ppmf Aliases: CVE-2020-17048	Out-of-bounds Write in ChakraCore Chakra Scripting Engine Memory Corruption Vulnerability This CVE ID is unique from CVE-2020-17054.	1.11.23 Vulnerable
GHSA-vw2g-5827-m9fp Aliases: CVE-2019-1308	Out-of-bounds write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory …	1.11.14 Vulnerable
GHSA-6j89-jhpr-849f Aliases: CVE-2019-1307	Out-of-bounds write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory …	1.11.14 Vulnerable
GHSA-2wwc-w2gw-4329 Aliases: CVE-2019-1366	Out-of-bounds write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory …	1.11.14 Vulnerable
GHSA-p23j-g745-8449 Aliases: CVE-2019-1335	Out-of-bounds write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory …	1.11.14 Vulnerable
GHSA-2452-3rwv-x89c Aliases: CVE-2019-1298	Out-of-bounds write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory …	1.11.13 Vulnerable
GHSA-pcgf-qjx2-qv4q Aliases: CVE-2019-1217	Out-of-bounds write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory …	1.11.13 Vulnerable
GHSA-q99r-j969-6jwr Aliases: CVE-2019-1237	Out-of-bounds write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory …	1.11.13 Vulnerable
GHSA-grvw-q343-58wh Aliases: CVE-2019-1300	Out-of-bounds write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory …	1.11.13 Vulnerable
GHSA-jr84-p554-62pm Aliases: CVE-2020-0969	ChakraCore RCE Vulnerability A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in …	1.11.18 Vulnerable
GHSA-233h-59m2-qqf2 Aliases: CVE-2020-0970	ChakraCore Remote Code Execution Vulnerability A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles …	1.11.18 Vulnerable
GHSA-g67x-mgrv-m3gv Aliases: CVE-2020-0812	ChakraCore RCE Vulnerability A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in …	1.11.17 Vulnerable
GHSA-fhc8-h6hr-h9mq Aliases: CVE-2020-0767	ChakraCore RCE Vulnerability A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in …	1.11.16 Vulnerable
GHSA-9hjg-j983-mqcc Aliases: CVE-2020-1065	ChakraCore RCE Vulnerability A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in …	1.11.19 Vulnerable
GHSA-vvvh-5xrm-pxff Aliases: CVE-2020-0813	ChakraCore information disclosure vulnerability An information disclosure vulnerability exists when Chakra improperly discloses the contents of its memory, which could …	1.11.17 Vulnerable
GHSA-w6qf-35f2-j6h7 Aliases: CVE-2020-0712	ChakraCore RCE Vulnerability A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in …	1.11.16 Vulnerable
GHSA-63fw-7jgf-5hwv Aliases: CVE-2020-0711	ChakraCore RCE Vulnerability A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in …	1.11.16 Vulnerable
GHSA-pg99-mp4c-75g6 Aliases: CVE-2020-0811	ChakraCore RCE Vulnerability A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in …	1.11.17 Vulnerable
GHSA-8xv4-c7rq-j577 Aliases: CVE-2020-1037	ChakraCore Remote Code Execution Vulnerability A remote code execution vulnerability exists in the way that the Chakra scripting engine handles …	1.11.19 Vulnerable
GHSA-g6mc-8679-ghx9 Aliases: CVE-2020-0713	ChakraCore RCE Vulnerability A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in …	1.11.16 Vulnerable
GHSA-g3m9-qrfj-xw4g Aliases: CVE-2020-1073	ChakraCore RCE Vulnerability A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in …	1.11.20 Vulnerable
GHSA-jgrp-6qqq-3284 Aliases: CVE-2021-42279	Chakra Scripting Engine and ChakraCore Vulnerable to Memory Corruption Chakra Scripting Engine and ChakraCore are vulnerable to memory corruption due …	There are no reported fixed by versions.
GHSA-67xp-4726-4978 Aliases: CVE-2020-0710	ChakraCore RCE Vulnerability A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in …	1.11.16 Vulnerable
CVE-2020-1037	Improper Restriction of Operations within the Bounds of a Memory Buffer A remote code execution vulnerability exists in the way …	1.11.18 Vulnerable
CVE-2020-1219	Improper Restriction of Operations within the Bounds of a Memory Buffer A remote code execution vulnerability exists in the way …	1.11.20 Vulnerable
CVE-2019-1426	Out-of-bounds Write A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in …	1.11.15 Vulnerable
CVE-2020-0878	A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory, aka 'Microsoft Browser Memory …	1.11.22 Vulnerable
CVE-2019-1427	Out-of-bounds Write A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in …	1.11.15 Vulnerable
CVE-2019-1428	Out-of-bounds Write A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in …	1.11.15 Vulnerable
CVE-2020-17054	Improper Restriction of Operations within the Bounds of a Memory Buffer Chakra Scripting Engine Memory Corruption Vulnerability This CVE ID …	1.11.23 Vulnerable
GHSA-pwpr-vp2v-99xw Aliases: CVE-2019-1138	Out-of-bounds write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory …	1.11.13 Vulnerable 1.11.13 Vulnerable

Next non-vulnerable version	None.
Latest non-vulnerable version	None.
Risk score	3.6

Advisory	Summary	Aliases
GHSA-cwp9-956f-vcwh	Out-of-bounds write in Microsoft.ChakraCore A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects …	CVE-2019-1141
GHSA-mw7r-3g6w-85qg	Out-of-bounds write in Microsoft.ChakraCore A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects …	CVE-2019-1131
GHSA-9qw8-ccq9-ffj9	Out-of-bounds write in Microsoft.ChakraCore A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects …	CVE-2019-1139
GHSA-758c-g2ff-9444	Out-of-bounds write in Microsoft.ChakraCore A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects …	CVE-2019-1140
GHSA-v89p-5hr2-4rh4	Out-of-bounds write A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory …	CVE-2019-1197
GHSA-ppxc-pmx9-qjv9	Out-of-bounds write in Microsoft.ChakraCore A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects …	CVE-2019-1195
GHSA-hfm2-fffh-v47v	Out-of-bounds write in ChakraCore A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects …	CVE-2019-1196