Lucene search

K
osvGoogleOSV:GHSA-538H-6RV2-WMJ3
HistoryMay 14, 2022 - 2:24 a.m.

ChakraCore RCE Vulnerability

2022-05-1402:24:33
Google
osv.dev
9
chakracore
rce
vulnerability
microsoft edge
javascript
memory corruption

AI Score

8.7

Confidence

High

EPSS

0.276

Percentile

96.9%

The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka “Scripting Engine Memory Corruption Vulnerability,” a different vulnerability than CVE-2016-3199.

AI Score

8.7

Confidence

High

EPSS

0.276

Percentile

96.9%