Remote Code Execution (RCE)

microsoft.chakracore is vulnerable to remote code execution RCE attacks. The vulnerability exists in CrossSite::CommonThunk of lib/Runtime/Base/CrossSite.cpp where the Chakra scripting engine handles objects in memory insecurely, causing a Chakra Scripting Engine Memory Corruption vulnerability...