Lucene search

K
osvGoogleOSV:GHSA-92J2-GG59-4572
HistoryMay 14, 2022 - 2:23 a.m.

ChakraCore RCE Vulnerability

2022-05-1402:23:12
Google
osv.dev
11
microsoft
internet explorer
edge
remote code execution
memory corruption
chakra javascript engine
vulnerability

EPSS

0.681

Percentile

98.0%

The scripting engines in Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, as demonstrated by the Chakra JavaScript engine, aka “Scripting Engine Memory Corruption Vulnerability.”