Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:7307
HistoryAug 16, 2018 - 3:18 a.m.

Remote Code Execution (RCE)

2018-08-1603:18:42
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
14

0.069 Low

EPSS

Percentile

94.0%

Microsoft.ChakraCore is vulnerable to remote code execution (RCE) attacks. The library does not properly handle fixed deferred functions, leading to an Out-Of-Bounds read/write that can crash the application or cause arbitrary code to be executed.