Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:8021
HistoryDec 12, 2018 - 3:59 a.m.

Remote Code Execution (RCE)

2018-12-1203:59:24
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6

0.968 High

EPSS

Percentile

99.7%

Microsoft.ChakraCore is vulnerable to remote code execution. This is due to a buffer overflow in the JIT scripting engine which would allow an attacker to execute arbitrary code in the context of the authenticated user. This CVE ID is different from CVE-2018-8583, CVE-2018-8617, CVE-2018-8618, CVE-2018-8629