Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:20265
HistoryMay 17, 2019 - 1:31 a.m.

Remote Code Execution (RCE)

2019-05-1701:31:34
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7

EPSS

0.024

Percentile

90.1%

Microsoft.ChakraCore is vulnerable to remote code execution. This is due to the way the ChakraCore scripting engine handles objects in memory which could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user.