Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:7019
HistoryJul 11, 2018 - 6:54 a.m.

Remote Code Execution (RCE)

2018-07-1106:54:07
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6

0.064 Low

EPSS

Percentile

93.7%

microsoft.chakracore is vulnerable to remote code execution (RCE) attacks. The vulnerability exists in CrossSite::CommonThunk of lib/Runtime/Base/CrossSite.cpp where the Chakra scripting engine handles objects in memory insecurely, causing a Chakra Scripting Engine Memory Corruption vulnerability.