Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:7594
HistoryOct 11, 2018 - 5:37 a.m.

Remote Code Execution (RCE)

2018-10-1105:37:38
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11

EPSS

0.084

Percentile

94.5%

Microsoft.ChakraCore is vulnerable to remote code execution (RCE) attacks. The vulnerability exists in Chakra::TypeConfusion_8_16 JIT of lib/RuntimeLanguage/JavascriptOperators.cpp where the memory could be corrupted and eventually cause the RCE attack.