Lucene search

K
osvGoogleOSV:GHSA-985M-XQV8-RH79
HistoryMay 14, 2022 - 2:24 a.m.

ChakraCore RCE Vulnerability

2022-05-1402:24:57
Google
osv.dev
3

0.576 Medium

EPSS

Percentile

97.7%

The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka “Scripting Engine Memory Corruption Vulnerability,” a different vulnerability than CVE-2016-0186 and CVE-2016-0191.