Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:8017
HistoryDec 12, 2018 - 3:43 a.m.

Remote Code Execution (RCE)

2018-12-1203:43:47
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9

0.968 High

EPSS

Percentile

99.7%

Microsoft.ChakraCore is vulnerable to remote code execution. This is due to an out-of-bounds in the ChakraCore JIT which would allow an attacker to execute arbitrary code in the context of the authenticated user. This CVE ID is different from CVE-2018-8617, CVE-2018-8618, CVE-2018-8624, CVE-2018-8629.