microsoft.chakracore is vulnerable to remote code execution (RCE) attacks. The attack exists due to a detached buffer bug that causes arbitrary memory reading and writing that can cause arbitrary code to be executed. This CVE is unique from CVE-2018-8286, CVE-2018-8290, CVE-2018-8294.
CPE | Name | Operator | Version |
---|---|---|---|
microsoft.chakracore | le | 1.10.0 | |
microsoft.chakracore.vc140 | le | 1.10.0 |