CVE-2017-0252
Critical · 9.8CVSS
9.8
EPSS
13.4%
Published
May 15, 2017
CISA due date
—
The record
A remote code execution vulnerability exists in Microsoft Chakra Core in the way JavaScript engines render when handling objects in memory. aka "Scripting Engine Memory Corruption Vulnerability". This vulnerability is unique from CVE-2017-0223.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| NuGet | Microsoft.ChakraCore | 0 | 1.4.4 |
Related vulnerabilities
- CVE-2019-0639 A remote code execution vulnerability exists in the way that the ChakraCore scripting… Also affects Microsoft.ChakraCore
- CVE-2019-0568 A remote code execution vulnerability exists in the way that the Chakra scripting engine… Also affects Microsoft.ChakraCore
- CVE-2019-0567 A remote code execution vulnerability exists in the way that the Chakra scripting engine… Also affects Microsoft.ChakraCore
- CVE-2019-0539 A remote code execution vulnerability exists in the way that the Chakra scripting engine… Also affects Microsoft.ChakraCore
- CVE-2018-8624 A remote code execution vulnerability exists in the way that the Chakra scripting engine… Also affects Microsoft.ChakraCore
- CVE-2018-8618 A remote code execution vulnerability exists in the way that the Chakra scripting engine… Also affects Microsoft.ChakraCore
- CVE-2018-8617 A remote code execution vulnerability exists in the way that the Chakra scripting engine… Also affects Microsoft.ChakraCore
- CVE-2018-8629 A remote code execution vulnerability exists in the way that the Chakra scripting engine… Also affects Microsoft.ChakraCore