Remote Code Execution

chakracore is vulnerable to remote code execution. A previous MSRC fix removes the body scope of an enclosing function when a nested function is declared in the param scope of that enclosing function. This results in an incorrect calculation of envIndex for any symbols captured from enclosing...

Remote Code Execution (RCE)

microsoft.chakracore is vulnerable to remote code execution. This happens due to the type confustion in FrameDisplay items that can lead to an Out-Of-Bound Read . This CVE ID is different from CVE-2017-11792, CVE-2017-11793, CVE-2017-11796, CVE-2017-11797, CVE-2017-11798, CVE-2017-11799,...