Chakracore (Microsoft) - vulnerabilities (CVEs)

263 CVEs, 0 in the last 30 days, 65 known versions, newest CVE from 2023-07-18. Vendor: Microsoft.

CVEs of Chakracore

CVE-2023-37139 - CVSS 5.5 (medium), 2023-07-18: ChakraCore branch master cbb9b was discovered to contain a stack overflow vulnerability via the function Js::ScopeSlots::IsDebuggerScopeSlotArray().
CVE-2023-37142 - CVSS 5.5 (medium), 2023-07-18: ChakraCore branch master cbb9b was discovered to contain a segmentation violation via the function Js::EntryPointInfo::HasInlinees().
CVE-2023-37141 - CVSS 5.5 (medium), 2023-07-18: ChakraCore branch master cbb9b was discovered to contain a segmentation violation via the function Js::ProfilingHelpers::ProfiledNewScArray().
CVE-2023-37140 - CVSS 5.5 (medium), 2023-07-18: ChakraCore branch master cbb9b was discovered to contain a segmentation violation via the function Js::DiagScopeVariablesWalker::GetChildrenCount().
CVE-2023-37143 - CVSS 5.5 (medium), 2023-07-18: ChakraCore branch master cbb9b was discovered to contain a segmentation violation via the function BackwardPass::IsEmptyLoopAfterMemOp().
CVE-2020-23315 - CVSS 7.5 (high), 2022-01-20: There is an ASSERTION (pFuncBody->GetYieldRegister() == oldYieldRegister) failed in Js::DebugContext::RundownSourcesAndReparse in ChakraCore version…
CVE-2021-42279 - CVSS 7.5 (high), 2021-11-10: Chakra Scripting Engine Memory Corruption Vulnerability
CVE-2020-17131 - CVSS 7.5 (high), 2020-12-10: Chakra Scripting Engine Memory Corruption Vulnerability
CVE-2020-17054 - CVSS 7.5 (high), 2020-11-11: Chakra Scripting Engine Memory Corruption Vulnerability
CVE-2020-17048 - CVSS 8.1 (high), 2020-11-11: Chakra Scripting Engine Memory Corruption Vulnerability
CVE-2020-1172 - CVSS 7.5 (high), 2020-09-11: <p>A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory. The vulnerability could corrupt…
CVE-2020-1180 - CVSS 7.5 (high), 2020-09-11: <p>A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory. The vulnerability could corrupt…
CVE-2020-1057 - CVSS 8.1 (high), 2020-09-11: <p>A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory. The vulnerability could corrupt…
CVE-2020-0878 - CVSS 7.5 (high), 2020-09-11: <p>A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory. The vulnerability could corrupt memory in a way…
CVE-2020-1555 - CVSS 8.8 (high), 2020-08-17: A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge (HTML-based). The vulnerability…
CVE-2020-1219 - CVSS 7.5 (high), 2020-06-09: A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory, aka 'Microsoft Browser Memory Corruption…
CVE-2020-1073 - CVSS 8.1 (high), 2020-06-09: A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory…
CVE-2020-1065 - CVSS 7.5 (high), 2020-05-21: A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory. The vulnerability could corrupt memory…
CVE-2020-1037 - CVSS 7.5 (high), 2020-05-21: A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based). The…
CVE-2020-0970 - CVSS 7.5 (high), 2020-04-15: A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory…
CVE-2020-0969 - CVSS 7.5 (high), 2020-04-15: A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based), aka 'Chakra…
CVE-2020-0848 - CVSS 7.5 (high), 2020-03-12: A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory…
CVE-2020-0831 - CVSS 7.5 (high), 2020-03-12: A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory…
CVE-2020-0823 - CVSS 7.5 (high), 2020-03-12: A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory…
CVE-2020-0827 - CVSS 7.5 (high), 2020-03-12: A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory…
CVE-2020-0830 - CVSS 7.5 (high), 2020-03-12: A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka 'Scripting Engine Memory…
CVE-2020-0826 - CVSS 7.5 (high), 2020-03-12: A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory…
CVE-2020-0829 - CVSS 7.5 (high), 2020-03-12: A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory…
CVE-2020-0825 - CVSS 7.5 (high), 2020-03-12: A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory…
CVE-2020-0828 - CVSS 7.5 (high), 2020-03-12: A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory…
CVE-2020-0811 - CVSS 7.5 (high), 2020-03-12: A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based)L, aka…
CVE-2020-0813 - CVSS 7.5 (high), 2020-03-12: An information disclosure vulnerability exists when Chakra improperly discloses the contents of its memory, which could provide an attacker with information…
CVE-2020-0812 - CVSS 7.5 (high), 2020-03-12: A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based)L, aka…
CVE-2020-0768 - CVSS 7.5 (high), 2020-03-12: A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka 'Scripting Engine Memory…
CVE-2020-0767 - CVSS 7.5 (high), 2020-02-11: A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory…
CVE-2020-0710 - CVSS 7.5 (high), 2020-02-11: A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory…
CVE-2020-0713 - CVSS 7.5 (high), 2020-02-11: A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory…
CVE-2020-0712 - CVSS 7.5 (high), 2020-02-11: A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory…
CVE-2020-0711 - CVSS 7.5 (high), 2020-02-11: A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory…
CVE-2019-1428 - CVSS 7.5 (high), 2019-11-12: A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge (HTML-based), aka 'Scripting…
CVE-2019-1427 - CVSS 7.5 (high), 2019-11-12: A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge (HTML-based), aka 'Scripting…
CVE-2019-1426 - CVSS 7.5 (high), 2019-11-12: A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge (HTML-based), aka 'Scripting…
CVE-2019-1366 - CVSS 7.5 (high), 2019-10-10: A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting…
CVE-2019-1335 - CVSS 7.5 (high), 2019-10-10: A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting…
CVE-2019-1307 - CVSS 7.5 (high), 2019-10-10: A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting…
CVE-2019-1308 - CVSS 7.5 (high), 2019-10-10: A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting…
CVE-2019-1300 - CVSS 7.5 (high), 2019-09-11: A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting…
CVE-2019-1298 - CVSS 7.5 (high), 2019-09-11: A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting…
CVE-2019-1237 - CVSS 7.5 (high), 2019-09-11: A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting…
CVE-2019-1217 - CVSS 7.5 (high), 2019-09-11: A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting…
CVE-2019-1138 - CVSS 7.5 (high), 2019-09-11: A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting…
CVE-2019-1197 - CVSS 4.2 (medium), 2019-08-14: A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based). The…
CVE-2019-1196 - CVSS 4.2 (medium), 2019-08-14: A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based). The…
CVE-2019-1195 - CVSS 4.2 (medium), 2019-08-14: A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based). The…
CVE-2019-1141 - CVSS 4.2 (medium), 2019-08-14: A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based). The…
CVE-2019-1140 - CVSS 8.8 (high), 2019-08-14: A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based). The…
CVE-2019-1139 - CVSS 4.2 (medium), 2019-08-14: A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based). The…
CVE-2019-1131 - CVSS 4.2 (medium), 2019-08-14: A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based). The…
CVE-2019-1107 - CVSS 7.5 (high), 2019-07-15: A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting…
CVE-2019-1106 - CVSS 7.5 (high), 2019-07-15: A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting…
CVE-2019-1103 - CVSS 7.5 (high), 2019-07-15: A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting…
CVE-2019-1092 - CVSS 7.5 (high), 2019-07-15: A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting…
CVE-2019-1062 - CVSS 7.5 (high), 2019-07-15: A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting…
CVE-2019-1001 - CVSS 7.5 (high), 2019-07-15: A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka 'Scripting Engine Memory…
CVE-2019-1052 - CVSS 7.5 (high), 2019-06-12: A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based). The…
CVE-2019-1051 - CVSS 7.5 (high), 2019-06-12: A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based). The…
CVE-2019-1023 - CVSS 6.5 (medium), 2019-06-12: An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory in Microsoft Edge. An attacker who…
CVE-2019-1024 - CVSS 7.5 (high), 2019-06-12: A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based). The…
CVE-2019-0991 - CVSS 7.5 (high), 2019-06-12: A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based). The…
CVE-2019-0990 - CVSS 6.5 (medium), 2019-06-12: A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based). The…
CVE-2019-1003 - CVSS 7.5 (high), 2019-06-12: A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based). The…
CVE-2019-0989 - CVSS 7.5 (high), 2019-06-12: A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based). The…
CVE-2019-0993 - CVSS 7.5 (high), 2019-06-12: A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based). The…
CVE-2019-0924 - CVSS 7.5 (high), 2019-05-16: A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting…
CVE-2019-0933 - CVSS 7.5 (high), 2019-05-16: A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting…
CVE-2019-0927 - CVSS 7.5 (high), 2019-05-16: A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting…
CVE-2019-0925 - CVSS 7.5 (high), 2019-05-16: A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting…
CVE-2019-0937 - CVSS 7.5 (high), 2019-05-16: A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting…
CVE-2019-0913 - CVSS 7.5 (high), 2019-05-16: A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting…
CVE-2019-0916 - CVSS 7.5 (high), 2019-05-16: A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting…
CVE-2019-0912 - CVSS 7.5 (high), 2019-05-16: A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting…
CVE-2019-0915 - CVSS 7.5 (high), 2019-05-16: A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting…
CVE-2019-0922 - CVSS 7.5 (high), 2019-05-16: A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting…
CVE-2019-0911 - CVSS 7.5 (high), 2019-05-16: A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka 'Scripting Engine Memory…
CVE-2019-0914 - CVSS 7.5 (high), 2019-05-16: A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting…
CVE-2019-0917 - CVSS 7.5 (high), 2019-05-16: A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting…
CVE-2019-0861 - CVSS 7.5 (high), 2019-04-09: A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting…
CVE-2019-0860 - CVSS 7.5 (high), 2019-04-09: A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting…
CVE-2019-0810 - CVSS 7.5 (high), 2019-04-09: A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting…
CVE-2019-0806 - CVSS 7.5 (high), 2019-04-09: A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting…
CVE-2019-0829 - CVSS 7.5 (high), 2019-04-09: A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting…
CVE-2019-0812 - CVSS 7.5 (high), 2019-04-09: A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting…
CVE-2019-0739 - CVSS 7.5 (high), 2019-04-09: A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory…
CVE-2019-0773 - CVSS 7.5 (high), 2019-04-09: A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory…
CVE-2019-0771 - CVSS 7.5 (high), 2019-04-09: A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory…
CVE-2019-0769 - CVSS 7.5 (high), 2019-04-09: A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory…
CVE-2019-0746 - CVSS 6.5 (medium), 2019-04-09: An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory in Microsoft Edge, aka 'Scripting Engine…
CVE-2019-0609 - CVSS 7.5 (high), 2019-04-08: A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka 'Scripting Engine Memory…
CVE-2019-0592 - CVSS 7.5 (high), 2019-04-08: A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting…
CVE-2019-0639 - CVSS 7.5 (high), 2019-04-08: A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory…