Vulnerabilities > Microsoft > Chakracore > Critical

DATE CVE VULNERABILITY TITLE RISK
2018-10-10 CVE-2018-8500 Out-of-bounds Write vulnerability in Microsoft Chakracore
A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore.
network
low complexity
microsoft CWE-787
critical
9.8
2017-11-02 CVE-2017-11767 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Microsoft Chakracore
ChakraCore allows an attacker to gain the same user rights as the current user, due to the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability".
network
low complexity
microsoft CWE-119
critical
9.8
2017-08-11 CVE-2017-8658 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Microsoft Chakracore
A remote code execution vulnerability exists in the way that the Chakra JavaScript engine renders when handling objects in memory, aka "Scripting Engine Memory Corruption Vulnerability".
network
low complexity
microsoft CWE-119
critical
9.8