Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:7309
HistoryAug 16, 2018 - 4:17 a.m.

Remote Code Execution (RCE)

2018-08-1604:17:50
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9

0.064 Low

EPSS

Percentile

93.7%

Microsoft.ChakraCore is vulnerable to remote code execution (RCE). The library does not merge block data properly for loops, leading to an invalid pointer read that can crash the application or cause arbitrary code to be executed.