Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:7027
HistoryJul 11, 2018 - 8:54 a.m.

Remote Code Execution (RCE)

2018-07-1108:54:19
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7

0.064 Low

EPSS

Percentile

93.7%

microsoft.chakracore is vulnerable to remote code execution (RCE) attacks. The attack exists due to a detached buffer bug that causes arbitrary memory reading and writing that can cause arbitrary code to be executed. This CVE is unique from CVE-2018-8286, CVE-2018-8290, CVE-2018-8294.