The vulnerability of Microsoft Chakra’s kernel in the Microsoft Edge browser allows a hacker to execute arbitrary code.

The vulnerability in the Microsoft Chakra kernel of the Microsoft Edge browser arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code when accessing objects in memory...

Microsoft Chakra Remote Code Execution Vulnerability

Microsoft Chakra is a JavaScript engine component used by Microsoft's Edge web browser.Chakra Core is an open source version of Chakra. A remote code execution vulnerability exists in Microsoft Chakra Core. A remote attacker could exploit this vulnerability to cause memory corruption...

CVE-2017-0223

CVE-2017-0223 refers to a ChakraCore remote code execution vulnerability in Microsoft’s Chakra Core rendering engine used by Edge. The root cause is memory corruption in the engine when handling in-memory objects, enabling remote code execution via crafted content. Connected advisories (GHSA and ...

CVE-2017-0223

A remote code execution vulnerability exists in Microsoft Chakra Core in the way JavaScript engines render when handling objects in memory. aka "Scripting Engine Memory Corruption Vulnerability". This vulnerability is unique from CVE-2017-0252...

(Pwn2Own) Microsoft Chakra Array Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Chakra. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

Microsoft Chakra ArrayBuffer.transfer Uninitialized Buffer Information Leak Vulnerability

This vulnerability allows remote attackers to leak sensitive information on vulnerable installations of Microsoft Chakra. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handlin...

Microsoft Chakra JavaScript Scripting Engine Memory Corruption Vulnerability (CNVD-2016-03020)

Microsoft Edge is a web browser developed by Microsoft and is the default browser that comes with the Windows 10 operating system.Chakra JScript engine is a JavaScript engine component used by IE and Edge web browser. A memory corruption vulnerability exists in the way the Microsoft Chakra...