Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:22486
HistoryFeb 12, 2020 - 5:13 a.m.

Remote Code Execution

2020-02-1205:13:20
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
18

EPSS

0.972

Percentile

99.9%

chakracore is vulnerable to remote code execution. This is due to an incorrect offset for homeObj on cross-site objects, which would allow an attacker to corrupt memory in such a way that it allows for execution of arbitrary code in the context of the current user. This CVE ID is different from CVE-2020-0673, CVE-2020-0674, CVE-2020-0710, CVE-2020-0711, CVE-2020-0712, CVE-2020-0767.