Lucene search
Veracode Vulnerability DatabaseVERACODE:25484HistoryMay 26, 2020 - 5:04 a.m.
Remote Code Execution
2020-05-2605:04:22
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
0.017 Low
EPSS
Percentile
88.0%
chakracore is vulnerable to remote code execution. A previous MSRC fix removes the body scope of an enclosing function when a nested function is declared in the param scope of that enclosing function. This results in an incorrect calculation of envIndex for any symbols captured from enclosing scopes if the skipped body scope appears in the frameDisplay being passed to the nested function.
| CPE | Name | Operator | Version |
|---|---|---|---|
| microsoft.chakracore | le | 1.11.18 | |
| microsoft.chakracore.vc140 | le | 1.11.18 |
Related
osv
osv
CVE-2020-1065
2020-05-21 23:15:12
ChakraCore RCE Vulnerability
2022-05-24 17:18:25
nvd
nvd
CVE-2020-1065
2020-05-21 23:15:12
cvelist
cvelist
CVE-2020-1065
2020-05-21 22:52:55
prion
prion
Remote code execution
2020-05-21 23:15:00
cve
cve
CVE-2020-1065
2020-05-21 23:15:12
github
github
ChakraCore RCE Vulnerability
2022-05-24 17:18:25
mscve
mscve
Scripting Engine Memory Corruption Vulnerability
2020-05-12 07:00:00
kaspersky
kaspersky
KLA11771 Multiple vulnerabilities in Microsoft Internet Explorer and Edge
2020-05-12 00:00:00
nessus
nessus
openvas
openvas
Microsoft Windows Multiple Vulnerabilities (KB4556807)
2020-05-13 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB4551853)
2020-05-13 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB4556799)
2020-05-13 00:00:00
mskb
mskb
May 12, 2020âKB4556807 (OS Build 17134.1488)
2020-05-12 07:00:00
May 12, 2020âKB4556799 (OS Builds 18362.836 and 18363.836) - EXPIRED
2020-06-09 07:00:00
May 12, 2020âKB4551853 (OS Build 17763.1217)
2020-05-12 07:00:00
