2 matches found
Remote Code Execution (RCE)
microsoft.chakracore is vulnerable to remote code execution. This is due to a use-after-free bug where ServerScriptContext is freed before being unregistered, which would allow an attacker to execute arbitrary code in the context of the authenticated user. This CVE ID is different from...
7.5CVSS9AI score0.67587EPSS
SaveExploits5References2Affected Software2
Remote Code Execution (RCE)
microsoft.chakracore is vulnerable to remote code execution. This is due to a Use-After-Free UAF vulnerability in ServerScriptContext which could lead to memory corruption and allow an attacker to execute arbitrary code in the context of the authenticated user. This CVE ID is different from...
7.5CVSS8.1AI score0.66554EPSS
SaveExploits9References6Affected Software2
20