CVE-2017-11767

2017-11-0219:00:00

microsoft

www.cve.org

AI Score

9.4

Confidence

High

EPSS

0.008

Percentile

81.4%

JSON

ChakraCore allows an attacker to gain the same user rights as the current user, due to the way that the ChakraCore scripting engine handles objects in memory, aka “Scripting Engine Memory Corruption Vulnerability”.

CNA Affected

[
  {
    "product": "ChakraCore",
    "vendor": "Microsoft Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "ChakraCore"
      }
    ]
  }
]