Chakracore (Microsoft Corporation) - vulnerabilities (CVEs)

70 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2018-03-14. Vendor: Microsoft Corporation.

CVEs of Chakracore

• CVE-2018-0939 - CVSS 4.3 (medium), 2018-03-14: ChakraCore and Microsoft Edge in Windows 10 1703 and 1709 allow information disclosure, due to how the scripting engine handles objects in memory, aka…
• CVE-2018-0925 - CVSS 7.5 (high), 2018-03-14: ChakraCore allows remote code execution, due to how the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption…
• CVE-2018-0933 - CVSS 7.5 (high), 2018-03-14: ChakraCore and Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the Chakra scripting engine…
• CVE-2018-0937 - CVSS 7.5 (high), 2018-03-14: ChakraCore and Microsoft Windows 10 1703 and 1709 allow remote code execution, due to how the Chakra scripting engine handles objects in memory, aka "Chakra…
• CVE-2018-0931 - CVSS 7.5 (high), 2018-03-14: ChakraCore and Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the Chakra scripting engine…
• CVE-2018-0936 - CVSS 7.5 (high), 2018-03-14: ChakraCore and Microsoft Windows 10 1709 allow remote code execution, due to how the Chakra scripting engine handles objects in memory, aka "Chakra Scripting…
• CVE-2018-0930 - CVSS 7.5 (high), 2018-03-14: ChakraCore and Microsoft Edge in Microsoft Windows 10 1709 allows remote code execution, due to how the Chakra scripting engine handles objects in memory, aka…
• CVE-2018-0934 - CVSS 7.5 (high), 2018-03-14: ChakraCore and Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the Chakra scripting engine…
• CVE-2018-0891 - CVSS 4.3 (medium), 2018-03-14: ChakraCore, and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and…
• CVE-2018-0873 - CVSS 7.5 (high), 2018-03-14: ChakraCore and Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the Chakra…
• CVE-2018-0872 - CVSS 7.5 (high), 2018-03-14: ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the…
• CVE-2018-0874 - CVSS 7.5 (high), 2018-03-14: ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the…
• CVE-2018-0856 - CVSS 7.5 (high), 2018-02-15: Microsoft Edge and ChakraCore in Microsoft Windows 10 1703 and 1709 allows remote code execution, due to how the scripting engine handles objects in memory,…
• CVE-2018-0859 - CVSS 7.5 (high), 2018-02-15: Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the…
• CVE-2018-0858 - CVSS 7.5 (high), 2018-02-15: ChakraCore allows remote code execution, due to how the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption…
• CVE-2018-0857 - CVSS 7.5 (high), 2018-02-15: Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the…
• CVE-2018-0860 - CVSS 7.5 (high), 2018-02-15: Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the…
• CVE-2018-0836 - CVSS 7.5 (high), 2018-02-15: Microsoft Edge and ChakraCore in Microsoft Windows 10 1703 and 1709 allows remote code execution, due to how the scripting engine handles objects in memory,…
• CVE-2018-0840 - CVSS 7.5 (high), 2018-02-15: Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Internet Explorer…
• CVE-2018-0835 - CVSS 7.5 (high), 2018-02-15: Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the…
• CVE-2018-0838 - CVSS 7.5 (high), 2018-02-15: Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the…
• CVE-2018-0834 - CVSS 7.5 (high), 2018-02-15: Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the…
• CVE-2018-0837 - CVSS 7.5 (high), 2018-02-15: Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the…
• CVE-2018-0818 - CVSS 7.5 (high), 2018-01-10: Microsoft ChakraCore allows an attacker to bypass Control Flow Guard (CFG) in conjunction with another vulnerability to run arbitrary code on a target system,…
• CVE-2017-11909 - CVSS 7.5 (high), 2017-12-12: ChakraCore and Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due…
• CVE-2017-11912 - CVSS 7.5 (high), 2017-12-12: ChakraCore, and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and…
• CVE-2017-11918 - CVSS 7.5 (high), 2017-12-12: ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to gain the same user rights as the…
• CVE-2017-11894 - CVSS 7.5 (high), 2017-12-12: ChakraCore, and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and…
• CVE-2017-11908 - CVSS 7.5 (high), 2017-12-12: ChakraCore and Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles…
• CVE-2017-11911 - CVSS 7.5 (high), 2017-12-12: ChakraCore and Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due…
• CVE-2017-11916 - CVSS 7.5 (high), 2017-12-12: ChakraCore allows an attacker to execute arbitrary code in the context of the current user, due to how the ChakraCore scripting engine handles objects in…
• CVE-2017-11930 - CVSS 7.5 (high), 2017-12-12: ChakraCore, and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, Windows 10…
• CVE-2017-11893 - CVSS 7.5 (high), 2017-12-12: ChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the…
• CVE-2017-11905 - CVSS 7.5 (high), 2017-12-12: ChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the…
• CVE-2017-11910 - CVSS 7.5 (high), 2017-12-12: ChakraCore and Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current…
• CVE-2017-11914 - CVSS 7.5 (high), 2017-12-12: ChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to gain the same user rights as the current…
• CVE-2017-11919 - CVSS 5.3 (medium), 2017-12-12: ChakraCore, and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, and Windows…
• CVE-2017-11889 - CVSS 7.5 (high), 2017-12-12: ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context…
• CVE-2017-11895 - CVSS 7.5 (high), 2017-12-12: ChakraCore, and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, and Internet…
• CVE-2017-11858 - CVSS 7.5 (high), 2017-11-15: ChakraCore and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and…
• CVE-2017-11866 - CVSS 7.5 (high), 2017-11-15: ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the…
• CVE-2017-11873 - CVSS 7.5 (high), 2017-11-15: ChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the same…
• CVE-2017-11862 - CVSS 7.5 (high), 2017-11-15: ChakraCore and Microsoft Edge in Windows 10 1709 and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to…
• CVE-2017-11871 - CVSS 7.5 (high), 2017-11-15: ChakraCore and Microsoft Edge in Windows 10 1703, 1709, and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user,…
• CVE-2017-11861 - CVSS 7.5 (high), 2017-11-15: Microsoft Edge in Windows 10 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the same user rights as the…
• CVE-2017-11870 - CVSS 7.5 (high), 2017-11-15: ChakraCore and Microsoft Edge in Windows 10 1703, 1709, and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user,…
• CVE-2017-11841 - CVSS 7.5 (high), 2017-11-15: ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the…
• CVE-2017-11836 - CVSS 7.5 (high), 2017-11-15: ChakraCore, and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker…
• CVE-2017-11840 - CVSS 7.5 (high), 2017-11-15: ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the…
• CVE-2017-11846 - CVSS 7.5 (high), 2017-11-15: ChakraCore and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and…
• CVE-2017-11791 - CVSS 3.1 (low), 2017-11-15: ChakraCore and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2,…
• CVE-2017-11838 - CVSS 7.5 (high), 2017-11-15: ChakraCore and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, and Microsoft…
• CVE-2017-11843 - CVSS 7.5 (high), 2017-11-15: ChakraCore and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, and…
• CVE-2017-11837 - CVSS 7.5 (high), 2017-11-15: ChakraCore and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, and Microsoft…
• CVE-2017-11767 - CVSS 9.8 (critical), 2017-11-02: ChakraCore allows an attacker to gain the same user rights as the current user, due to the way that the ChakraCore scripting engine handles objects in memory,…
• CVE-2017-11801 - CVSS 7.5 (high), 2017-10-13: ChakraCore allows an attacker to execute arbitrary code in the context of the current user, due to how the ChakraCore scripting engine handles objects in…
• CVE-2017-11805 - CVSS 7.5 (high), 2017-10-13: ChakraCore and Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user, due to how the…
• CVE-2017-11808 - CVSS 7.5 (high), 2017-10-13: ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the…
• CVE-2017-11821 - CVSS 7.5 (high), 2017-10-13: ChakraCore and Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user, due to how the…
• CVE-2017-11799 - CVSS 7.5 (high), 2017-10-13: ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the…
• CVE-2017-11804 - CVSS 7.5 (high), 2017-10-13: ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the…
• CVE-2017-11807 - CVSS 7.5 (high), 2017-10-13: ChakraCore and Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user, due to how the…
• CVE-2017-11812 - CVSS 7.5 (high), 2017-10-13: ChakraCore and Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of…
• CVE-2017-11797 - CVSS 7.5 (high), 2017-10-13: ChakraCore allows an attacker to execute arbitrary code in the context of the current user, due to how the ChakraCore scripting engine handles objects in…
• CVE-2017-11802 - CVSS 7.5 (high), 2017-10-13: ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the…
• CVE-2017-11806 - CVSS 7.5 (high), 2017-10-13: ChakraCore and Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user, due to how the…
• CVE-2017-11809 - CVSS 7.5 (high), 2017-10-13: ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the…
• CVE-2017-11796 - CVSS 7.5 (high), 2017-10-13: ChakraCore and Microsoft Edge in Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting…
• CVE-2017-11792 - CVSS 7.5 (high), 2017-10-13: ChakraCore and Microsoft Edge in Microsoft Windows 10 1703 allow an attacker to execute arbitrary code in the context of the current user, due to how the…
• CVE-2017-8658 - CVSS 9.8 (critical), 2017-08-11: A remote code execution vulnerability exists in the way that the Chakra JavaScript engine renders when handling objects in memory, aka "Scripting Engine…