Remote Code Execution (RCE)

🗓️ 04 Dec 2018 12:40:39Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 25 Views

Microsoft ChakraCore vulnerability to remote code executio

Reporter	Title	Published	Views	Family All 164
Cvelist	CVE-2018-0838	15 Feb 201802:00	–	cvelist
Cvelist	CVE-2018-0859	15 Feb 201802:00	–	cvelist
Cvelist	CVE-2018-0858	15 Feb 201802:00	–	cvelist
Cvelist	CVE-2018-0861	15 Feb 201802:00	–	cvelist
Cvelist	CVE-2018-0836	15 Feb 201802:00	–	cvelist
Cvelist	CVE-2018-0866	15 Feb 201802:00	–	cvelist
Cvelist	CVE-2018-0835	15 Feb 201802:00	–	cvelist
Cvelist	CVE-2018-0837	15 Feb 201802:00	–	cvelist
Cvelist	CVE-2018-0856	15 Feb 201802:00	–	cvelist
Cvelist	CVE-2018-0834	15 Feb 201802:00	–	cvelist

Vulners

Node

-microsoft.chakracoreRange≤1.8.0

-microsoft.chakracore.vc140Range≤1.8.0

Source	Link
github	www.github.com/Microsoft/ChakraCore/commit/b99d0dcbf5a890e3f5dcdbfcec033f5c92b2bd6d
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0836
github	www.github.com/Microsoft/ChakraCore/pull/4676
github	www.github.com/Microsoft/ChakraCore/wiki/Roadmap

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

04 Dec 2018 12:39Current

7.5High risk

Vulners AI Score7.5

EPSS0.88898