Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:6935
HistoryJul 05, 2018 - 2:11 a.m.

Privilege Escalation

2018-07-0502:11:36
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
14

EPSS

0.949

Percentile

99.3%

microsoft.chakracore is vulnerable to privilege escalation. This happens because there is a flaw when getting the length property from ScriptFunction in the GetPropertyBuiltIns function of JavascriptGeneratorFunction.cpp.This CVE ID is different from CVE-2017-11886, CVE-2017-11889, CVE-2017-11890, CVE-2017-11893, CVE-2017-11894, CVE-2017-11895, CVE-2017-11901, CVE-2017-11903, CVE-2017-11905, CVE-2017-11905, CVE-2017-11907, CVE-2017-11908, CVE-2017-11909, CVE-2017-11910, CVE-2017-11911, CVE-2017-11913, CVE-2017-11914, CVE-2017-11916, CVE-2017-11918, and CVE-2017-11930.