Skip to main content
← NuGet

Microsoft.ChakraCore

247 known vulnerabilities (4 high, 24 medium), with the versions each affects and the releases that fix them.

Latest release
1.11.24 (Dec 8, 2020): affected by CVE-2021-42279
Newest unaffected release
Every release is affected by at least one advisory
Advisories
247 · 4 high, 24 medium
Releases
61 since 1.2.0 (Aug 24, 2016)
Registry
NuGet
Releases read
Nov 8, 2026

Version timeline

Show all 247 advisoriesShow fewer advisories
Every release cve.now has on record, lowest version on the left; each bar is a run of versions an advisory affects.

Advisories 247

  • CVE-2021-42279Medium 4.2

    Chakra Scripting Engine Memory Corruption Vulnerability

    Affected: through 1.11.24.

    No fix released. The latest release, 1.11.24, is still affected.

  • CVE-2020-17131Medium 4.2

    Chakra Scripting Engine Memory Corruption Vulnerability

    Affected: fixed in 1.11.24.

    Fixed in 1.11.24 (released Dec 8, 2020, 1 day before disclosure).

    The latest release, 1.11.24, is not affected.

  • CVE-2020-17054Medium 4.2

    Chakra Scripting Engine Memory Corruption Vulnerability

    Affected: fixed in 1.11.23.

    Fixed in 1.11.23 (released Nov 10, 2020, 1 day before disclosure).

    The latest release, 1.11.24, is not affected.

  • CVE-2020-17048Medium 4.2

    Chakra Scripting Engine Memory Corruption Vulnerability

    Affected: fixed in 1.11.23.

    Fixed in 1.11.23 (released Nov 10, 2020, 1 day before disclosure).

    The latest release, 1.11.24, is not affected.

  • CVE-2020-1180Medium 4.2

    Scripting Engine Memory Corruption Vulnerability

    Affected: fixed in 1.11.22.

    Fixed in 1.11.22 (released Sep 8, 2020, 3 days before disclosure).

    The latest release, 1.11.24, is not affected.

  • CVE-2020-1172Medium 4.2

    Scripting Engine Memory Corruption Vulnerability

    Affected: fixed in 1.11.22.

    Fixed in 1.11.22 (released Sep 8, 2020, 3 days before disclosure).

    The latest release, 1.11.24, is not affected.

  • CVE-2020-1057Medium 4.2

    Scripting Engine Memory Corruption Vulnerability

    Affected: fixed in 1.11.22.

    Fixed in 1.11.22 (released Sep 8, 2020, 3 days before disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting…

    Affected: fixed in 1.11.20.

    Fixed in 1.11.20 (released Jun 10, 2020, 1 day after disclosure).

    The latest release, 1.11.24, is not affected.

  • CVE-2020-1065Medium 4.2

    Scripting Engine Memory Corruption Vulnerability

    Affected: fixed in 1.11.19.

    Fixed in 1.11.19 (released May 12, 2020, 9 days before disclosure).

    The latest release, 1.11.24, is not affected.

  • CVE-2020-1037Medium 4.2

    Chakra Scripting Engine Memory Corruption Vulnerability

    Affected: fixed in 1.11.19.

    Fixed in 1.11.19 (released May 12, 2020, 9 days before disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting…

    Affected: fixed in 1.11.18.

    Fixed in 1.11.18 (released Apr 15, 2020, the day of disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge…

    Affected: fixed in 1.11.18.

    Fixed in 1.11.18 (released Apr 15, 2020, the day of disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting…

    Affected: fixed in 1.11.17.

    Fixed in 1.11.17 (released Mar 10, 2020, 2 days before disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka…

    Affected: fixed in 1.11.17.

    Fixed in 1.11.17 (released Mar 10, 2020, 2 days before disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka…

    Affected: fixed in 1.11.17.

    Fixed in 1.11.17 (released Mar 10, 2020, 2 days before disclosure).

    The latest release, 1.11.24, is not affected.

Show all 247 advisoriesShow fewer advisories
  • A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting…

    Affected: fixed in 1.11.17.

    Fixed in 1.11.17 (released Mar 10, 2020, 2 days before disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka…

    Affected: fixed in 1.11.17.

    Fixed in 1.11.17 (released Mar 10, 2020, 2 days before disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting…

    Affected: fixed in 1.11.17.

    Fixed in 1.11.17 (released Mar 10, 2020, 2 days before disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting…

    Affected: fixed in 1.11.17.

    Fixed in 1.11.17 (released Mar 10, 2020, 2 days before disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting…

    Affected: fixed in 1.11.17.

    Fixed in 1.11.17 (released Mar 10, 2020, 2 days before disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting…

    Affected: fixed in 1.11.17.

    Fixed in 1.11.17 (released Mar 10, 2020, 2 days before disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting…

    Affected: fixed in 1.11.17.

    Fixed in 1.11.17 (released Mar 10, 2020, 2 days before disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting…

    Affected: fixed in 1.11.17.

    Fixed in 1.11.17 (released Mar 10, 2020, 2 days before disclosure).

    The latest release, 1.11.24, is not affected.

  • An information disclosure vulnerability exists when Chakra improperly discloses the contents of its memory, which could provide an…

    Affected: fixed in 1.11.17.

    Fixed in 1.11.17 (released Mar 10, 2020, 2 days before disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge…

    Affected: fixed in 1.11.17.

    Fixed in 1.11.17 (released Mar 10, 2020, 2 days before disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge…

    Affected: fixed in 1.11.17.

    Fixed in 1.11.17 (released Mar 10, 2020, 2 days before disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka…

    Affected: fixed in 1.11.17.

    Fixed in 1.11.17 (released Mar 10, 2020, 2 days before disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting…

    Affected: fixed in 1.11.16.

    Fixed in 1.11.16 (released Feb 12, 2020, 1 day after disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting…

    Affected: fixed in 1.11.16.

    Fixed in 1.11.16 (released Feb 12, 2020, 1 day after disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting…

    Affected: fixed in 1.11.16.

    Fixed in 1.11.16 (released Feb 12, 2020, 1 day after disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting…

    Affected: fixed in 1.11.16.

    Fixed in 1.11.16 (released Feb 12, 2020, 1 day after disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting…

    Affected: fixed in 1.11.16.

    Fixed in 1.11.16 (released Feb 12, 2020, 1 day after disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…

    Affected: fixed in 1.11.14.

    Fixed in 1.11.14 (released Oct 8, 2019, 2 days before disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…

    Affected: fixed in 1.11.14.

    Fixed in 1.11.14 (released Oct 8, 2019, 2 days before disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…

    Affected: fixed in 1.11.14.

    Fixed in 1.11.14 (released Oct 8, 2019, 2 days before disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…

    Affected: fixed in 1.11.14.

    Fixed in 1.11.14 (released Oct 8, 2019, 2 days before disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…

    Affected: fixed in 1.11.13.

    Fixed in 1.11.13 (released Sep 11, 2019, the day of disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…

    Affected: fixed in 1.11.13.

    Fixed in 1.11.13 (released Sep 11, 2019, the day of disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…

    Affected: fixed in 1.11.13.

    Fixed in 1.11.13 (released Sep 11, 2019, the day of disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…

    Affected: fixed in 1.11.13.

    Fixed in 1.11.13 (released Sep 11, 2019, the day of disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…

    Affected: fixed in 1.11.13.

    Fixed in 1.11.13 (released Sep 11, 2019, the day of disclosure).

    The latest release, 1.11.24, is not affected.

  • CVE-2019-1197Medium 4.2

    Chakra Scripting Engine Memory Corruption Vulnerability

    Affected: fixed in 1.11.12.

    Fixed in 1.11.12 (released Aug 13, 2019, 1 day before disclosure).

    The latest release, 1.11.24, is not affected.

  • CVE-2019-1196Medium 4.2

    Chakra Scripting Engine Memory Corruption Vulnerability

    Affected: fixed in 1.11.12.

    Fixed in 1.11.12 (released Aug 13, 2019, 1 day before disclosure).

    The latest release, 1.11.24, is not affected.

  • CVE-2019-1195Medium 4.2

    Chakra Scripting Engine Memory Corruption Vulnerability

    Affected: fixed in 1.11.12.

    Fixed in 1.11.12 (released Aug 13, 2019, 1 day before disclosure).

    The latest release, 1.11.24, is not affected.

  • CVE-2019-1141Medium 4.2

    Chakra Scripting Engine Memory Corruption Vulnerability

    Affected: fixed in 1.11.12.

    Fixed in 1.11.12 (released Aug 13, 2019, 1 day before disclosure).

    The latest release, 1.11.24, is not affected.

  • Chakra Scripting Engine Memory Corruption Vulnerability

    Affected: fixed in 1.11.12.

    Fixed in 1.11.12 (released Aug 13, 2019, 1 day before disclosure).

    The latest release, 1.11.24, is not affected.

  • CVE-2019-1139Medium 4.2

    Chakra Scripting Engine Memory Corruption Vulnerability

    Affected: fixed in 1.11.12.

    Fixed in 1.11.12 (released Aug 13, 2019, 1 day before disclosure).

    The latest release, 1.11.24, is not affected.

  • CVE-2019-1131Medium 4.2

    Chakra Scripting Engine Memory Corruption Vulnerability

    Affected: fixed in 1.11.12.

    Fixed in 1.11.12 (released Aug 13, 2019, 1 day before disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…

    Affected: fixed in 1.11.11.

    Fixed in 1.11.11 (released Jul 9, 2019, 20 days before disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…

    Affected: fixed in 1.11.11.

    Fixed in 1.11.11 (released Jul 9, 2019, 20 days before disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…

    Affected: fixed in 1.11.11.

    Fixed in 1.11.11 (released Jul 9, 2019, 20 days before disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…

    Affected: fixed in 1.11.11.

    Fixed in 1.11.11 (released Jul 9, 2019, 6 days before disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…

    Affected: fixed in 1.11.11.

    Fixed in 1.11.11 (released Jul 9, 2019, 6 days before disclosure).

    The latest release, 1.11.24, is not affected.

  • CVE-2019-1052Medium 4.2

    Chakra Scripting Engine Memory Corruption Vulnerability

    Affected: fixed in 1.11.10.

    Fixed in 1.11.10 (released Jun 12, 2019, the day of disclosure).

    The latest release, 1.11.24, is not affected.

  • CVE-2019-1051Medium 4.2

    Chakra Scripting Engine Memory Corruption Vulnerability

    Affected: fixed in 1.11.10.

    Fixed in 1.11.10 (released Jun 12, 2019, the day of disclosure).

    The latest release, 1.11.24, is not affected.

  • CVE-2019-1024Medium 4.2

    Chakra Scripting Engine Memory Corruption Vulnerability

    Affected: fixed in 1.11.10.

    Fixed in 1.11.10 (released Jun 12, 2019, the day of disclosure).

    The latest release, 1.11.24, is not affected.

  • CVE-2019-1003Medium 4.2

    Chakra Scripting Engine Memory Corruption Vulnerability

    Affected: fixed in 1.11.10.

    Fixed in 1.11.10 (released Jun 12, 2019, the day of disclosure).

    The latest release, 1.11.24, is not affected.

  • CVE-2019-1002Medium 4.2

    Chakra Scripting Engine Memory Corruption Vulnerability

    Affected: fixed in 1.11.10.

    Fixed in 1.11.10 (released Jun 12, 2019, the day of disclosure).

    The latest release, 1.11.24, is not affected.

  • CVE-2019-0993Medium 4.2

    Chakra Scripting Engine Memory Corruption Vulnerability

    Affected: fixed in 1.11.10.

    Fixed in 1.11.10 (released Jun 12, 2019, the day of disclosure).

    The latest release, 1.11.24, is not affected.

  • CVE-2019-0992Medium 4.2

    Chakra Scripting Engine Memory Corruption Vulnerability

    Affected: fixed in 1.11.10.

    Fixed in 1.11.10 (released Jun 12, 2019, the day of disclosure).

    The latest release, 1.11.24, is not affected.

  • CVE-2019-0991Medium 4.2

    Chakra Scripting Engine Memory Corruption Vulnerability

    Affected: fixed in 1.11.10.

    Fixed in 1.11.10 (released Jun 12, 2019, the day of disclosure).

    The latest release, 1.11.24, is not affected.

  • CVE-2019-0989Medium 4.2

    Chakra Scripting Engine Memory Corruption Vulnerability

    Affected: fixed in 1.11.10.

    Fixed in 1.11.10 (released Jun 12, 2019, the day of disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…

    Affected: fixed in 1.11.9.

    Fixed in 1.11.9 (released May 14, 2019, 2 days before disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…

    Affected: fixed in 1.11.9.

    Fixed in 1.11.9 (released May 14, 2019, 2 days before disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…

    Affected: fixed in 1.11.9.

    Fixed in 1.11.9 (released May 14, 2019, 2 days before disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…

    Affected: fixed in 1.11.9.

    Fixed in 1.11.9 (released May 14, 2019, 2 days before disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…

    Affected: fixed in 1.11.9.

    Fixed in 1.11.9 (released May 14, 2019, 2 days before disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…

    Affected: fixed in 1.11.9.

    Fixed in 1.11.9 (released May 14, 2019, 2 days before disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…

    Affected: fixed in 1.11.9.

    Fixed in 1.11.9 (released May 14, 2019, 2 days before disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…

    Affected: fixed in 1.11.9.

    Fixed in 1.11.9 (released May 14, 2019, 2 days before disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…

    Affected: fixed in 1.11.9.

    Fixed in 1.11.9 (released May 14, 2019, 2 days before disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…

    Affected: fixed in 1.11.9.

    Fixed in 1.11.9 (released May 14, 2019, 2 days before disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…

    Affected: fixed in 1.11.9.

    Fixed in 1.11.9 (released May 14, 2019, 2 days before disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…

    Affected: fixed in 1.11.9.

    Fixed in 1.11.9 (released May 14, 2019, 2 days before disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…

    Affected: fixed in 1.11.9.

    Fixed in 1.11.9 (released May 14, 2019, 2 days before disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka…

    Affected: fixed in 1.11.9.

    Fixed in 1.11.9 (released May 14, 2019, 2 days before disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…

    Affected: fixed in 1.11.8.

    Fixed in 1.11.8 (released Apr 9, 2019, the day of disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…

    Affected: fixed in 1.11.8.

    Fixed in 1.11.8 (released Apr 9, 2019, the day of disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…

    Affected: fixed in 1.11.8.

    Fixed in 1.11.8 (released Apr 9, 2019, the day of disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…

    Affected: fixed in 1.11.8.

    Fixed in 1.11.8 (released Apr 9, 2019, the day of disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…

    Affected: fixed in 1.11.8.

    Fixed in 1.11.8 (released Apr 9, 2019, the day of disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…

    Affected: fixed in 1.11.8.

    Fixed in 1.11.8 (released Apr 9, 2019, the day of disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka…

    Affected: fixed in 1.11.7.

    Fixed in 1.11.7 (released Mar 12, 2019, 28 days before disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka…

    Affected: fixed in 1.11.7.

    Fixed in 1.11.7 (released Mar 12, 2019, 28 days before disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka…

    Affected: fixed in 1.11.7.

    Fixed in 1.11.7 (released Mar 12, 2019, 28 days before disclosure).

    The latest release, 1.11.24, is not affected.

  • An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory in Microsoft Edge, aka…

    Affected: fixed in 1.11.7.

    Fixed in 1.11.7 (released Mar 12, 2019, 27 days before disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting…

    Affected: fixed in 1.11.7.

    Fixed in 1.11.7 (released Mar 12, 2019, 27 days before disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…

    Affected: fixed in 1.11.7.

    Fixed in 1.11.7 (released Mar 12, 2019, 27 days before disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka…

    Affected: fixed in 1.11.7.

    Fixed in 1.11.7 (released Mar 12, 2019, 27 days before disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…

    Affected: fixed in 1.11.7.

    Fixed in 1.11.7 (released Mar 12, 2019, 27 days before disclosure).

    The latest release, 1.11.24, is not affected.

  • A vulnerability exists in Microsoft Chakra JIT server, aka 'Scripting Engine Elevation of Privileged Vulnerability'.

    Affected: fixed in 1.11.6.

    Fixed in 1.11.6 (released Feb 13, 2019, 21 days before disclosure).

    The latest release, 1.11.24, is not affected.

  • An information disclosure vulnerability exists when Chakra improperly discloses the contents of its memory, which could provide an…

    Affected: fixed in 1.11.6.

    Fixed in 1.11.6 (released Feb 13, 2019, 21 days before disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…

    Affected: fixed in 1.11.5.

    Fixed in 1.11.5 (released Jan 9, 2019, 1 day after disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…

    Affected: fixed in 1.11.5.

    Fixed in 1.11.5 (released Jan 9, 2019, 1 day after disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…

    Affected: fixed in 1.11.5.

    Fixed in 1.11.5 (released Jan 9, 2019, 1 day after disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…

    Affected: fixed in 1.11.4.

    Fixed in 1.11.4 (released Dec 13, 2018, 1 day after disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…

    Affected: fixed in 1.11.4.

    Fixed in 1.11.4 (released Dec 13, 2018, 1 day after disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…

    Affected: fixed in 1.11.4.

    Fixed in 1.11.4 (released Dec 13, 2018, 1 day after disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…

    Affected: fixed in 1.11.3.

    Fixed in 1.11.3 (released Nov 14, 2018, 28 days before disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…

    Affected: fixed in 1.11.3.

    Fixed in 1.11.3 (released Nov 14, 2018, 28 days before disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…

    Affected: fixed in 1.11.3.

    Fixed in 1.11.3 (released Nov 14, 2018, the day of disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…

    Affected: fixed in 1.11.3.

    Fixed in 1.11.3 (released Nov 14, 2018, the day of disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…

    Affected: fixed in 1.11.3.

    Fixed in 1.11.3 (released Nov 14, 2018, the day of disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…

    Affected: fixed in 1.11.3.

    Fixed in 1.11.3 (released Nov 14, 2018, the day of disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…

    Affected: fixed in 1.11.3.

    Fixed in 1.11.3 (released Nov 14, 2018, the day of disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…

    Affected: fixed in 1.11.3.

    Fixed in 1.11.3 (released Nov 14, 2018, the day of disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…

    Affected: fixed in 1.11.3.

    Fixed in 1.11.3 (released Nov 14, 2018, the day of disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…

    Affected: fixed in 1.11.3.

    Fixed in 1.11.3 (released Nov 14, 2018, the day of disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…

    Affected: fixed in 1.11.2.

    Fixed in 1.11.2 (released Oct 9, 2018, 1 day before disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…

    Affected: fixed in 1.11.2.

    Fixed in 1.11.2 (released Oct 9, 2018, 1 day before disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…

    Affected: fixed in 1.11.2.

    Fixed in 1.11.2 (released Oct 9, 2018, 1 day before disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…

    Affected: fixed in 1.11.2.

    Fixed in 1.11.2 (released Oct 9, 2018, 1 day before disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…

    Affected: fixed in 1.11.2.

    Fixed in 1.11.2 (released Oct 9, 2018, 1 day before disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting…

    Affected: fixed in 1.11.2.

    Fixed in 1.11.2 (released Oct 9, 2018, 1 day before disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…

    Affected: fixed in 1.11.1.

    Fixed in 1.11.1 (released Sep 12, 2018, 1 day before disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…

    Affected: fixed in 1.11.1.

    Fixed in 1.11.1 (released Sep 12, 2018, 1 day before disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…

    Affected: fixed in 1.11.1.

    Fixed in 1.11.1 (released Sep 12, 2018, 1 day before disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting…

    Affected: fixed in 1.11.1.

    Fixed in 1.11.1 (released Sep 12, 2018, 1 day before disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting…

    Affected: fixed in 1.11.1.

    Fixed in 1.11.1 (released Sep 12, 2018, 1 day before disclosure).

    The latest release, 1.11.24, is not affected.

  • An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory in Microsoft browsers…

    Affected: fixed in 1.11.1.

    Fixed in 1.11.1 (released Sep 12, 2018, 1 day before disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting…

    Affected: fixed in 1.11.1.

    Fixed in 1.11.1 (released Sep 12, 2018, 1 day before disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…

    Affected: fixed in 1.11.1.

    Fixed in 1.11.1 (released Sep 12, 2018, 1 day before disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka…

    Affected: fixed in 1.11.1.

    Fixed in 1.11.1 (released Sep 12, 2018, 1 day before disclosure).

    The latest release, 1.11.24, is not affected.

  • An information disclosure vulnerability exists when the browser scripting engine improperly handle object types, aka "Microsoft Scripting…

    Affected: fixed in 1.11.1.

    Fixed in 1.11.1 (released Sep 12, 2018, 1 day before disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting…

    Affected: fixed in 1.10.2.

    Fixed in 1.10.2 (released Aug 15, 2018, the day of disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka…

    Affected: fixed in 1.10.2.

    Fixed in 1.10.2 (released Aug 15, 2018, the day of disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…

    Affected: fixed in 1.10.2.

    Fixed in 1.10.2 (released Aug 15, 2018, the day of disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…

    Affected: fixed in 1.10.2.

    Fixed in 1.10.2 (released Aug 15, 2018, the day of disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…

    Affected: fixed in 1.10.2.

    Fixed in 1.10.2 (released Aug 15, 2018, the day of disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka…

    Affected: fixed in 1.10.2.

    Fixed in 1.10.2 (released Aug 15, 2018, the day of disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka…

    Affected: fixed in 1.10.1.

    Fixed in 1.10.1 (released Jul 10, 2018, 36 days before disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting…

    Affected: fixed in 1.10.2.

    Fixed in 1.10.2 (released Aug 15, 2018, the day of disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka…

    Affected: fixed in 1.10.2.

    Fixed in 1.10.2 (released Aug 15, 2018, the day of disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…

    Affected: fixed in 1.10.2.

    Fixed in 1.10.2 (released Aug 15, 2018, the day of disclosure).

    The latest release, 1.11.24, is not affected.

  • CVE-2018-8298High 7.5 · KEV

    A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engin

    Affected: fixed in 1.10.1.

    Fixed in 1.10.1 (released Jul 10, 2018, 1 day before disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…

    Affected: fixed in 1.10.1.

    Fixed in 1.10.1 (released Jul 10, 2018, 1 day before disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka…

    Affected: fixed in 1.10.1.

    Fixed in 1.10.1 (released Jul 10, 2018, 1 day before disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…

    Affected: fixed in 1.10.1.

    Fixed in 1.10.1 (released Jul 10, 2018, 1 day before disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka…

    Affected: fixed in 1.10.1.

    Fixed in 1.10.1 (released Jul 10, 2018, 1 day before disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka…

    Affected: fixed in 1.10.1.

    Fixed in 1.10.1 (released Jul 10, 2018, 1 day before disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…

    Affected: fixed in 1.10.1.

    Fixed in 1.10.1 (released Jul 10, 2018, 1 day before disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting…

    Affected: fixed in 1.10.1.

    Fixed in 1.10.1 (released Jul 10, 2018, 1 day before disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…

    Affected: fixed in 1.10.1.

    Fixed in 1.10.1 (released Jul 10, 2018, 1 day before disclosure).

    The latest release, 1.11.24, is not affected.

  • A security feature bypass vulnerability exists in the Microsoft Chakra scripting engine that allows Control Flow Guard (CFG) to be…

    Affected: fixed in 1.10.1.

    Fixed in 1.10.1 (released Jul 10, 2018, 1 day before disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting…

    Affected: fixed in 1.8.5.

    Fixed in 1.8.5 (released Jun 12, 2018, 2 days before disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…

    Affected: fixed in 1.8.5.

    Fixed in 1.8.5 (released Jun 12, 2018, 2 days before disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…

    Affected: fixed in 1.8.5.

    Fixed in 1.8.5 (released Jun 12, 2018, 2 days before disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…

    Affected: fixed in 1.8.4.

    Fixed in 1.8.4 (released May 8, 2018, 1 day before disclosure).

    The latest release, 1.11.24, is not affected.

  • An information disclosure vulnerability exists when Chakra improperly discloses the contents of its memory, which could provide an…

    Affected: fixed in 1.8.4.

    Fixed in 1.8.4 (released May 8, 2018, 1 day before disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka…

    Affected: fixed in 1.8.4.

    Fixed in 1.8.4 (released May 8, 2018, 1 day before disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka…

    Affected: fixed in 1.8.4.

    Fixed in 1.8.4 (released May 8, 2018, 1 day before disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…

    Affected: fixed in 1.8.4.

    Fixed in 1.8.4 (released May 8, 2018, 1 day before disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…

    Affected: fixed in 1.8.4.

    Fixed in 1.8.4 (released May 8, 2018, 1 day before disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka…

    Affected: fixed in 1.8.4.

    Fixed in 1.8.4 (released May 8, 2018, 1 day before disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka…

    Affected: fixed in 1.8.4.

    Fixed in 1.8.4 (released May 8, 2018, 1 day before disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka…

    Affected: fixed in 1.8.4.

    Fixed in 1.8.4 (released May 8, 2018, 1 day before disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka…

    Affected: fixed in 1.8.4.

    Fixed in 1.8.4 (released May 8, 2018, 1 day before disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…

    Affected: fixed in 1.8.4.

    Fixed in 1.8.4 (released May 8, 2018, 1 day before disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…

    Affected: fixed in 1.8.3.

    Fixed in 1.8.3 (released Apr 11, 2018, 1 day before disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…

    Affected: fixed in 1.8.3.

    Fixed in 1.8.3 (released Apr 11, 2018, 1 day before disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…

    Affected: fixed in 1.8.3.

    Fixed in 1.8.3 (released Apr 11, 2018, 1 day before disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…

    Affected: fixed in 1.8.3.

    Fixed in 1.8.3 (released Apr 11, 2018, 1 day before disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…

    Affected: fixed in 1.8.3.

    Fixed in 1.8.3 (released Apr 11, 2018, 1 day before disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…

    Affected: fixed in 1.8.3.

    Fixed in 1.8.3 (released Apr 11, 2018, 1 day before disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka…

    Affected: fixed in 1.8.3.

    Fixed in 1.8.3 (released Apr 11, 2018, 1 day before disclosure).

    The latest release, 1.11.24, is not affected.

  • ChakraCore and Microsoft Edge in Windows 10 1703 and 1709 allow information disclosure, due to how the scripting engine handles objects in…

    Affected: fixed in 1.8.2.

    Fixed in 1.8.2 (released Mar 13, 2018, 1 day before disclosure).

    The latest release, 1.11.24, is not affected.

  • ChakraCore and Microsoft Windows 10 1703 and 1709 allow remote code execution, due to how the Chakra scripting engine handles objects in…

    Affected: fixed in 1.8.2.

    Fixed in 1.8.2 (released Mar 13, 2018, 1 day before disclosure).

    The latest release, 1.11.24, is not affected.

  • ChakraCore and Microsoft Windows 10 1709 allow remote code execution, due to how the Chakra scripting engine handles objects in memory…

    Affected: fixed in 1.8.2.

    Fixed in 1.8.2 (released Mar 13, 2018, 1 day before disclosure).

    The latest release, 1.11.24, is not affected.

  • ChakraCore and Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the…

    Affected: fixed in 1.8.2.

    Fixed in 1.8.2 (released Mar 13, 2018, 1 day before disclosure).

    The latest release, 1.11.24, is not affected.

  • ChakraCore and Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the…

    Affected: fixed in 1.8.2.

    Fixed in 1.8.2 (released Mar 13, 2018, 1 day before disclosure).

    The latest release, 1.11.24, is not affected.

  • ChakraCore and Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the…

    Affected: fixed in 1.8.2.

    Fixed in 1.8.2 (released Mar 13, 2018, 1 day before disclosure).

    The latest release, 1.11.24, is not affected.

  • ChakraCore and Microsoft Edge in Microsoft Windows 10 1709 allows remote code execution, due to how the Chakra scripting engine handles…

    Affected: fixed in 1.8.2.

    Fixed in 1.8.2 (released Mar 13, 2018, 1 day before disclosure).

    The latest release, 1.11.24, is not affected.

  • ChakraCore allows remote code execution, due to how the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine…

    Affected: fixed in 1.8.2.

    Fixed in 1.8.2 (released Mar 13, 2018, 1 day before disclosure).

    The latest release, 1.11.24, is not affected.

  • ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution…

    Affected: fixed in 1.8.2.

    Fixed in 1.8.2 (released Mar 13, 2018, 1 day before disclosure).

    The latest release, 1.11.24, is not affected.

  • ChakraCore and Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to…

    Affected: fixed in 1.8.2.

    Fixed in 1.8.2 (released Mar 13, 2018, 1 day before disclosure).

    The latest release, 1.11.24, is not affected.

  • ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution…

    Affected: fixed in 1.8.2.

    Fixed in 1.8.2 (released Mar 13, 2018, 1 day before disclosure).

    The latest release, 1.11.24, is not affected.

  • Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution…

    Affected: fixed in 1.8.1.

    Fixed in 1.8.1 (released Feb 13, 2018, 2 days before disclosure).

    The latest release, 1.11.24, is not affected.

  • Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution…

    Affected: fixed in 1.8.1.

    Fixed in 1.8.1 (released Feb 13, 2018, 2 days before disclosure).

    The latest release, 1.11.24, is not affected.

  • ChakraCore allows remote code execution, due to how the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine…

    Affected: fixed in 1.8.1.

    Fixed in 1.8.1 (released Feb 13, 2018, 2 days before disclosure).

    The latest release, 1.11.24, is not affected.

  • Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution…

    Affected: fixed in 1.8.1.

    Fixed in 1.8.1 (released Feb 13, 2018, 2 days before disclosure).

    The latest release, 1.11.24, is not affected.

  • Microsoft Edge and ChakraCore in Microsoft Windows 10 1703 and 1709 allows remote code execution, due to how the scripting engine handles…

    Affected: fixed in 1.8.1.

    Fixed in 1.8.1 (released Feb 13, 2018, 2 days before disclosure).

    The latest release, 1.11.24, is not affected.

  • Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution…

    Affected: fixed in 1.8.1.

    Fixed in 1.8.1 (released Feb 13, 2018, 2 days before disclosure).

    The latest release, 1.11.24, is not affected.

  • Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution…

    Affected: fixed in 1.8.1.

    Fixed in 1.8.1 (released Feb 13, 2018, 2 days before disclosure).

    The latest release, 1.11.24, is not affected.

  • Microsoft Edge and ChakraCore in Microsoft Windows 10 1703 and 1709 allows remote code execution, due to how the scripting engine handles…

    Affected: fixed in 1.8.1.

    Fixed in 1.8.1 (released Feb 13, 2018, 2 days before disclosure).

    The latest release, 1.11.24, is not affected.

  • Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution…

    Affected: fixed in 1.8.1.

    Fixed in 1.8.1 (released Feb 13, 2018, 2 days before disclosure).

    The latest release, 1.11.24, is not affected.

  • Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution…

    Affected: fixed in 1.8.1.

    Fixed in 1.8.1 (released Feb 13, 2018, 2 days before disclosure).

    The latest release, 1.11.24, is not affected.

  • Microsoft ChakraCore allows an attacker to bypass Control Flow Guard (CFG) in conjunction with another vulnerability to run arbitrary code…

    Affected: fixed in 1.8.0.

    Fixed in 1.8.0 (released Jan 17, 2018, 7 days after disclosure).

    The latest release, 1.11.24, is not affected.

  • ChakraCore allows an attacker to execute arbitrary code in the context of the current user, due to how the ChakraCore scripting engine…

    Affected: fixed in 1.7.5.

    Fixed in 1.7.5 (released Dec 12, 2017, the day of disclosure).

    The latest release, 1.11.24, is not affected.

  • ChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to gain the same user…

    Affected: fixed in 1.7.5.

    Fixed in 1.7.5 (released Dec 12, 2017, the day of disclosure).

    The latest release, 1.11.24, is not affected.

  • ChakraCore and Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of…

    Affected: fixed in 1.7.5.

    Fixed in 1.7.5 (released Dec 12, 2017, the day of disclosure).

    The latest release, 1.11.24, is not affected.

  • ChakraCore and Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the…

    Affected: fixed in 1.7.5.

    Fixed in 1.7.5 (released Dec 12, 2017, the day of disclosure).

    The latest release, 1.11.24, is not affected.

  • ChakraCore and Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of…

    Affected: fixed in 1.7.5.

    Fixed in 1.7.5 (released Dec 12, 2017, the day of disclosure).

    The latest release, 1.11.24, is not affected.

  • ChakraCore and Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting…

    Affected: fixed in 1.7.5.

    Fixed in 1.7.5 (released Dec 12, 2017, the day of disclosure).

    The latest release, 1.11.24, is not affected.

  • ChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code…

    Affected: fixed in 1.7.5.

    Fixed in 1.7.5 (released Dec 12, 2017, the day of disclosure).

    The latest release, 1.11.24, is not affected.

  • ChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code…

    Affected: fixed in 1.7.5.

    Fixed in 1.7.5 (released Dec 12, 2017, the day of disclosure).

    The latest release, 1.11.24, is not affected.

  • ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary…

    Affected: fixed in 1.7.5.

    Fixed in 1.7.5 (released Dec 12, 2017, the day of disclosure).

    The latest release, 1.11.24, is not affected.

  • ChakraCore and Microsoft Edge in Windows 10 1703, 1709, and Windows Server, version 1709 allows an attacker to gain the same user rights…

    Affected: fixed in 1.7.4.

    Fixed in 1.7.4 (released Nov 16, 2017, 1 day after disclosure).

    The latest release, 1.11.24, is not affected.

  • ChakraCore and Microsoft Edge in Windows 10 1703, 1709, and Windows Server, version 1709 allows an attacker to gain the same user rights…

    Affected: fixed in 1.7.4.

    Fixed in 1.7.4 (released Nov 16, 2017, 1 day after disclosure).

    The latest release, 1.11.24, is not affected.

  • ChakraCore and Microsoft Edge in Windows 10 1709 and Windows Server, version 1709 allows an attacker to gain the same user rights as the…

    Affected: fixed in 1.7.4.

    Fixed in 1.7.4 (released Nov 16, 2017, 1 day after disclosure).

    The latest release, 1.11.24, is not affected.

  • ChakraCore allows an attacker to gain the same user rights as the current user, due to the way that the ChakraCore scripting engine…

    Affected: fixed in 1.6.2.

    Fixed in 1.6.2 (released Sep 14, 2017, 49 days before disclosure).

    The latest release, 1.11.24, is not affected.

  • ChakraCore and Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current…

    Affected: fixed in 1.7.3.

    Fixed in 1.7.3 (released Oct 11, 2017, 2 days before disclosure).

    The latest release, 1.11.24, is not affected.

  • ChakraCore and Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current…

    Affected: fixed in 1.7.3.

    Fixed in 1.7.3 (released Oct 11, 2017, 2 days before disclosure).

    The latest release, 1.11.24, is not affected.

  • ChakraCore and Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current…

    Affected: fixed in 1.7.3.

    Fixed in 1.7.3 (released Oct 11, 2017, 2 days before disclosure).

    The latest release, 1.11.24, is not affected.

  • ChakraCore and Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current…

    Affected: fixed in 1.7.3.

    Fixed in 1.7.3 (released Oct 11, 2017, 2 days before disclosure).

    The latest release, 1.11.24, is not affected.

  • ChakraCore allows an attacker to execute arbitrary code in the context of the current user, due to how the ChakraCore scripting engine…

    Affected: fixed in 1.7.3.

    Fixed in 1.7.3 (released Oct 11, 2017, 2 days before disclosure).

    The latest release, 1.11.24, is not affected.

  • ChakraCore allows an attacker to execute arbitrary code in the context of the current user, due to how the ChakraCore scripting engine…

    Affected: fixed in 1.7.3.

    Fixed in 1.7.3 (released Oct 11, 2017, 2 days before disclosure).

    The latest release, 1.11.24, is not affected.

  • ChakraCore and Microsoft Edge in Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user, due to…

    Affected: fixed in 1.7.3.

    Fixed in 1.7.3 (released Oct 11, 2017, 2 days before disclosure).

    The latest release, 1.11.24, is not affected.

  • ChakraCore and Microsoft Edge in Microsoft Windows 10 1703 allow an attacker to execute arbitrary code in the context of the current user…

    Affected: fixed in 1.7.3.

    Fixed in 1.7.3 (released Oct 11, 2017, 2 days before disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way that the Chakra JavaScript engine renders when handling objects in memory, aka…

    Affected: fixed in 1.6.1.

    Fixed in 1.6.2 (released Sep 14, 2017, 34 days after disclosure, the advisory names 1.6.1, which was never published).

    The latest release, 1.11.24, is not affected.

  • Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to obtain information to further compromise the user's system due to the…

    Affected: fixed in 1.6.1.

    Fixed in 1.6.2 (released Sep 14, 2017, 37 days after disclosure, the advisory names 1.6.1, which was never published).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in Microsoft Chakra Core in the way JavaScript engines render when handling objects in memory.

    Affected: fixed in 1.4.4.

    Fixed in 1.4.4 (released May 23, 2017, 8 days after disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in Microsoft Chakra Core in the way JavaScript engines render when handling objects in memory.

    Affected: fixed in 1.4.4.

    Fixed in 1.4.4 (released May 23, 2017, 8 days after disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in Microsoft Edge in the way that the Chakra JavaScript engine renders when handling objects…

    Affected: fixed in 1.4.4.

    Fixed in 1.4.4 (released May 23, 2017, 11 days after disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in Microsoft Edge in the way that the Chakra JavaScript engine renders when handling objects…

    Affected: fixed in 1.4.4.

    Fixed in 1.4.4 (released May 23, 2017, 11 days after disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in Microsoft Edge in the way that the Chakra JavaScript engine renders when handling objects…

    Affected: fixed in 1.4.4.

    Fixed in 1.4.4 (released May 23, 2017, 11 days after disclosure).

    The latest release, 1.11.24, is not affected.

  • A remote code execution vulnerability exists in the way JavaScript engines render when handling objects in memory in Microsoft Edge, aka…

    Affected: fixed in 1.4.4.

    Fixed in 1.4.4 (released May 23, 2017, 11 days after disclosure).

    The latest release, 1.11.24, is not affected.

  • An information disclosure vulnerability exists in Microsoft Edge when the Chakra scripting engine does not properly handle objects in…

    Affected: fixed in 1.4.3.

    Fixed in 1.4.3 (released Apr 27, 2017, 15 days after disclosure).

    The latest release, 1.11.24, is not affected.

  • The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service…

    Affected: fixed in 1.2.2.

    Fixed in 1.2.2 (released Nov 21, 2016, 11 days after disclosure).

    The latest release, 1.11.24, is not affected.

  • The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service…

    Affected: fixed in 1.2.2.

    Fixed in 1.2.2 (released Nov 21, 2016, 11 days after disclosure).

    The latest release, 1.11.24, is not affected.

  • The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service…

    Affected: fixed in 1.2.2.

    Fixed in 1.2.2 (released Nov 21, 2016, 11 days after disclosure).

    The latest release, 1.11.24, is not affected.

  • The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service…

    Affected: fixed in 1.2.2.

    Fixed in 1.2.2 (released Nov 21, 2016, 11 days after disclosure).

    The latest release, 1.11.24, is not affected.

  • The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service…

    Affected: fixed in 1.2.2.

    Fixed in 1.2.2 (released Nov 21, 2016, 11 days after disclosure).

    The latest release, 1.11.24, is not affected.

  • The scripting engines in Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or…

    Affected: fixed in 1.2.2.

    Fixed in 1.2.2 (released Nov 21, 2016, 11 days after disclosure).

    The latest release, 1.11.24, is not affected.

  • CVE-2016-7201High 8.8 · KEV

    The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (mem

    Affected: fixed in 1.2.2.

    Fixed in 1.2.2 (released Nov 21, 2016, 11 days after disclosure).

    The latest release, 1.11.24, is not affected.

  • CVE-2016-7200High 8.8 · KEV

    The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (mem

    Affected: fixed in 1.2.2.

    Fixed in 1.2.2 (released Nov 21, 2016, 11 days after disclosure).

    The latest release, 1.11.24, is not affected.

  • The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory…

    Affected: through 1.2.1.

    Fixed in 1.2.2 (released Nov 21, 2016, 38 days after disclosure), the first release outside every affected range (no listed fixed version clears them all).

    The latest release, 1.11.24, is not affected.

  • The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory…

    Affected: through 1.2.1.

    Fixed in 1.2.2 (released Nov 21, 2016, 38 days after disclosure), the first release outside every affected range (no listed fixed version clears them all).

    The latest release, 1.11.24, is not affected.

  • The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code via a crafted web site, aka "Scripting…

    Affected: fixed in 1.2.1.

    Fixed in 1.2.1 (released Oct 22, 2016, 8 days after disclosure).

    The latest release, 1.11.24, is not affected.

  • The scripting engines in Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a…

    Affected: fixed in 1.2.1.

    Fixed in 1.2.1 (released Oct 22, 2016, 8 days after disclosure).

    The latest release, 1.11.24, is not affected.

  • The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory…

    Affected: fixed in 1.2.1.

    Fixed in 1.2.1 (released Oct 22, 2016, 8 days after disclosure).

    The latest release, 1.11.24, is not affected.

  • The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory…

    Affected: fixed in 1.2.1.

    Fixed in 1.2.1 (released Oct 22, 2016, 8 days after disclosure).

    The latest release, 1.11.24, is not affected.

  • The scripting engines in Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or…

    Affected: fixed in 1.2.1.

    Fixed in 1.2.1 (released Oct 22, 2016, 8 days after disclosure).

    The latest release, 1.11.24, is not affected.

  • The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory…

    Affected: fixed in 1.2.1.

    Fixed in 1.2.1 (released Oct 22, 2016, 38 days after disclosure).

    The latest release, 1.11.24, is not affected.

  • The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory…

    Affected: fixed in 1.2.1.

    Fixed in 1.2.1 (released Oct 22, 2016, 38 days after disclosure).

    The latest release, 1.11.24, is not affected.

  • The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code via a crafted web site, aka "Scripting…

    Affected: through 1.2.0.

    Fixed in 1.2.1 (released Oct 22, 2016, 74 days after disclosure), the first release outside every affected range (no listed fixed version clears them all).

    The latest release, 1.11.24, is not affected.

  • The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory…

    Affected: fixed in 1.2.0.0.

    Fixed in 1.2.0 (released Aug 24, 2016, 42 days after disclosure).

    The latest release, 1.11.24, is not affected.

  • The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory…

    Affected: fixed in 1.2.0.0.

    Fixed in 1.2.0 (released Aug 24, 2016, 42 days after disclosure).

    The latest release, 1.11.24, is not affected.

  • The Microsoft (1) JScript 9, (2) VBScript, and (3) Chakra JavaScript engines, as used in Microsoft Internet Explorer 11, Microsoft Edge…

    Affected: fixed in 1.2.0.0.

    Fixed in 1.2.0 (released Aug 24, 2016, 42 days after disclosure).

    The latest release, 1.11.24, is not affected.

  • The Microsoft (1) JScript 9, (2) VBScript, and (3) Chakra JavaScript engines, as used in Microsoft Internet Explorer 9 through 11…

    Affected: fixed in 1.2.0.0.

    Fixed in 1.2.0 (released Aug 24, 2016, 42 days after disclosure).

    The latest release, 1.11.24, is not affected.

  • The Microsoft (1) JScript 9, (2) VBScript, and (3) Chakra JavaScript engines, as used in Microsoft Internet Explorer 9 through 11…

    Affected: through 1.2.0.

    Fixed in 1.2.1 (released Oct 22, 2016, 101 days after disclosure), the first release outside every affected range (no listed fixed version clears them all).

    The latest release, 1.11.24, is not affected.

  • The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory…

    Affected: fixed in 1.3.0.

    Fixed in 1.3.0 (released Oct 28, 2016, 134 days after disclosure).

    The latest release, 1.11.24, is not affected.

  • The Microsoft (1) Chakra JavaScript, (2) JScript, and (3) VBScript engines, as used in Microsoft Internet Explorer 10 and 11 and Microsoft…

    Affected: fixed in 1.2.0.0.

    Fixed in 1.2.0 (released Aug 24, 2016, 69 days after disclosure).

    The latest release, 1.11.24, is not affected.

  • The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory…

    Affected: fixed in 1.2.0.0.

    Fixed in 1.2.0 (released Aug 24, 2016, 69 days after disclosure).

    The latest release, 1.11.24, is not affected.

  • The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory…

    Affected: fixed in 1.2.0.0.

    Fixed in 1.2.0 (released Aug 24, 2016, 105 days after disclosure).

    The latest release, 1.11.24, is not affected.

  • The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory…

    Affected: fixed in 1.2.0.0.

    Fixed in 1.2.0 (released Aug 24, 2016, 105 days after disclosure).

    The latest release, 1.11.24, is not affected.

  • The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory…

    Affected: fixed in 1.2.0.0.

    Fixed in 1.2.0 (released Aug 24, 2016, 105 days after disclosure).

    The latest release, 1.11.24, is not affected.

  • The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code via unspecified vectors, aka "Scripting…

    Affected: fixed in 1.2.0.

    Fixed in 1.2.0 (released Aug 24, 2016, 224 days after disclosure).

    The latest release, 1.11.24, is not affected.