Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:8013
HistoryDec 11, 2018 - 5:13 a.m.

Remote Code Execution (RCE)

2018-12-1105:13:17
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
22

EPSS

0.104

Percentile

95.1%

microsoft.chakracore is vulnerable to remote code execution. This is due to an error in handling objects in memory when the JavaScript engines fails to render, which would allow an attacker to execute arbitrary code in the context of the authenticated user. This CVE ID is different from CVE-2017-8517 and CVE-2017-8522.