Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:nuget/Microsoft.ChakraCore@1.11.17
purl pkg:nuget/Microsoft.ChakraCore@1.11.17
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score 3.6
Vulnerabilities affecting this package (16)
Advisory Summary Fixed in package version
GHSA-qwwg-gc55-qqrv
Aliases:
CVE-2020-17131
Out-of-bounds Write in Chakra Chakra Scripting Engine Memory Corruption Vulnerability
1.11.24
Vulnerable
GHSA-88cw-3m6x-49f7
Aliases:
CVE-2020-17054
Out-of-bounds Write in ChakraCore Chakra Scripting Engine Memory Corruption Vulnerability This CVE ID is unique from CVE-2020-17048.
1.11.23
Vulnerable
GHSA-wc43-7wj6-4ggr
Aliases:
CVE-2020-1180
Remote code execution in ChakraCore A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles …
1.11.22
Vulnerable
GHSA-xxfr-jrgh-x392
Aliases:
CVE-2020-1172
Remote code execution in ChakraCore A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles …
1.11.22
Vulnerable
GHSA-9f8c-f7h4-xghf
Aliases:
CVE-2020-1057
Remote code execution in ChakraCore A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles …
1.11.22
Vulnerable
GHSA-vpc2-7xmf-ppmf
Aliases:
CVE-2020-17048
Out-of-bounds Write in ChakraCore Chakra Scripting Engine Memory Corruption Vulnerability This CVE ID is unique from CVE-2020-17054.
1.11.23
Vulnerable
GHSA-jr84-p554-62pm
Aliases:
CVE-2020-0969
ChakraCore RCE Vulnerability A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in …
1.11.18
Vulnerable
GHSA-233h-59m2-qqf2
Aliases:
CVE-2020-0970
ChakraCore Remote Code Execution Vulnerability A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles …
1.11.18
Vulnerable
GHSA-9hjg-j983-mqcc
Aliases:
CVE-2020-1065
ChakraCore RCE Vulnerability A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in …
1.11.19
Vulnerable
GHSA-8xv4-c7rq-j577
Aliases:
CVE-2020-1037
ChakraCore Remote Code Execution Vulnerability A remote code execution vulnerability exists in the way that the Chakra scripting engine handles …
1.11.19
Vulnerable
GHSA-g3m9-qrfj-xw4g
Aliases:
CVE-2020-1073
ChakraCore RCE Vulnerability A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in …
1.11.20
Vulnerable
GHSA-jgrp-6qqq-3284
Aliases:
CVE-2021-42279
Chakra Scripting Engine and ChakraCore Vulnerable to Memory Corruption Chakra Scripting Engine and ChakraCore are vulnerable to memory corruption due … There are no reported fixed by versions.
CVE-2020-1037

Improper Restriction of Operations within the Bounds of a Memory Buffer A remote code execution vulnerability exists in the way …
1.11.18
Vulnerable
CVE-2020-1219

Improper Restriction of Operations within the Bounds of a Memory Buffer A remote code execution vulnerability exists in the way …
1.11.20
Vulnerable
CVE-2020-0878

A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory, aka 'Microsoft Browser Memory …
1.11.22
Vulnerable
CVE-2020-17054

Improper Restriction of Operations within the Bounds of a Memory Buffer Chakra Scripting Engine Memory Corruption Vulnerability This CVE ID …
1.11.23
Vulnerable
Vulnerabilities fixed by this package (15)

Advisory Summary Aliases
GHSA-wvhv-rr3v-vhpj
Out-of-bounds write in ChakraCore A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects … CVE-2020-0823
GHSA-5p67-cp9c-hqw4
Out-of-bounds write in ChakraCore A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects … CVE-2020-0848
GHSA-6cc6-66f5-mxjj
Out-of-bounds write in ChakraCore A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects … CVE-2020-0826
GHSA-2qgv-2cv4-g4cg
Out-of-bounds write in ChakraCore A remote code execution vulnerability exists in the way that the scripting engine handles objects in … CVE-2020-0832
GHSA-h2xm-2p6w-mj2v
Out-of-bounds Write in ChakraCore A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects … CVE-2020-0831
GHSA-c8qc-62qv-5p2x
Out-of-bounds Write in ChakraCore A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects … CVE-2020-0828
GHSA-86gw-g9jv-8vfg
Out-of-bounds write in ChakraCore A remote code execution vulnerability exists in the way that the scripting engine handles objects in … CVE-2020-0833
GHSA-j89m-gcjf-6ghp
Out-of-bounds write in ChakraCore A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects … CVE-2020-0825
GHSA-jv2c-mhcq-6wp4
Out-of-bounds write in ChakraCore A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects … CVE-2020-0829
GHSA-7j34-xq9v-9mqg
Out-of-bounds write in ChakraCore A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects … CVE-2020-0827
GHSA-g644-6fg4-hrh9
Out-of-bounds write in ChakraCore A remote code execution vulnerability exists in the way the scripting engine handles objects in memory … CVE-2020-0830
GHSA-pfrg-w49c-8432
Out-of-bounds write in ChakraCore A remote code execution vulnerability exists in the way the scripting engine handles objects in memory … CVE-2020-0768
GHSA-g67x-mgrv-m3gv
ChakraCore RCE Vulnerability A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in … CVE-2020-0812
GHSA-vvvh-5xrm-pxff
ChakraCore information disclosure vulnerability An information disclosure vulnerability exists when Chakra improperly discloses the contents of its memory, which could … CVE-2020-0813
GHSA-pg99-mp4c-75g6
ChakraCore RCE Vulnerability A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in … CVE-2020-0811