Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:6940
HistoryJul 05, 2018 - 3:08 a.m.

Remote Code Execution (RCE)

2018-07-0503:08:14
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
12

EPSS

0.947

Percentile

99.3%

microsoft.chakracore is vulnerable to remote code execution (RCE). This happens because it does not have ample InlineCache checks, leading to type confusion which allows an attacker to perform RCE. This CVE ID is different from CVE-2017-11886, CVE-2017-11889, CVE-2017-11890, CVE-2017-11893, CVE-2017-11894, CVE-2017-11895, CVE-2017-11901, CVE-2017-11903, CVE-2017-11905, CVE-2017-11905, CVE-2017-11907, CVE-2017-11908, CVE-2017-11909, CVE-2017-11911, CVE-2017-11912, CVE-2017-11913, CVE-2017-11914, CVE-2017-11916, CVE-2017-11918, and CVE-2017-11930. It also affects Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016.