# Microsoft.ChakraCore (NuGet) vulnerabilities 247 known vulnerabilities (4 high, 24 medium), with the versions each affects and the releases that fix them. ## At a glance - Latest release: 1.11.24 (Dec 8, 2020): affected by CVE-2021-42279 - Newest unaffected release: Every release is affected by at least one advisory - Releases: 61 since 1.2.0 (Aug 24, 2016) - Registry: https://www.nuget.org/packages/Microsoft.ChakraCore - Releases read: Nov 8, 2026 ## Version timeline Affected versions per advisory, in version order: - CVE-2021-42279: 1.2.0 to 1.11.24 (through the newest release) - CVE-2020-17131: 1.2.0 to 1.11.23 (1.11.24 is outside it) - CVE-2020-17054: 1.2.0 to 1.11.22 (1.11.23 is outside it) - CVE-2020-17048: 1.2.0 to 1.11.22 (1.11.23 is outside it) - CVE-2020-1180: 1.2.0 to 1.11.21 (1.11.22 is outside it) - CVE-2020-1172: 1.2.0 to 1.11.21 (1.11.22 is outside it) - CVE-2020-1057: 1.2.0 to 1.11.21 (1.11.22 is outside it) - CVE-2020-1073: 1.2.0 to 1.11.19 (1.11.20 is outside it) - CVE-2020-1065: 1.2.0 to 1.11.18 (1.11.19 is outside it) - CVE-2020-1037: 1.2.0 to 1.11.18 (1.11.19 is outside it) - CVE-2020-0970: 1.2.0 to 1.11.17 (1.11.18 is outside it) - CVE-2020-0969: 1.2.0 to 1.11.17 (1.11.18 is outside it) - CVE-2020-0848: 1.2.0 to 1.11.16 (1.11.17 is outside it) - CVE-2020-0833: 1.2.0 to 1.11.16 (1.11.17 is outside it) - CVE-2020-0832: 1.2.0 to 1.11.16 (1.11.17 is outside it) - CVE-2020-0831: 1.2.0 to 1.11.16 (1.11.17 is outside it) - CVE-2020-0830: 1.2.0 to 1.11.16 (1.11.17 is outside it) - CVE-2020-0829: 1.2.0 to 1.11.16 (1.11.17 is outside it) - CVE-2020-0828: 1.2.0 to 1.11.16 (1.11.17 is outside it) - CVE-2020-0827: 1.2.0 to 1.11.16 (1.11.17 is outside it) - CVE-2020-0826: 1.2.0 to 1.11.16 (1.11.17 is outside it) - CVE-2020-0825: 1.2.0 to 1.11.16 (1.11.17 is outside it) - CVE-2020-0823: 1.2.0 to 1.11.16 (1.11.17 is outside it) - CVE-2020-0813: 1.2.0 to 1.11.16 (1.11.17 is outside it) - CVE-2020-0812: 1.2.0 to 1.11.16 (1.11.17 is outside it) - CVE-2020-0811: 1.2.0 to 1.11.16 (1.11.17 is outside it) - CVE-2020-0768: 1.2.0 to 1.11.16 (1.11.17 is outside it) - CVE-2020-0767: 1.2.0 to 1.11.15 (1.11.16 is outside it) - CVE-2020-0713: 1.2.0 to 1.11.15 (1.11.16 is outside it) - CVE-2020-0712: 1.2.0 to 1.11.15 (1.11.16 is outside it) - CVE-2020-0711: 1.2.0 to 1.11.15 (1.11.16 is outside it) - CVE-2020-0710: 1.2.0 to 1.11.15 (1.11.16 is outside it) - CVE-2019-1366: 1.2.0 to 1.11.13 (1.11.14 is outside it) - CVE-2019-1335: 1.2.0 to 1.11.13 (1.11.14 is outside it) - CVE-2019-1308: 1.2.0 to 1.11.13 (1.11.14 is outside it) - CVE-2019-1307: 1.2.0 to 1.11.13 (1.11.14 is outside it) - CVE-2019-1300: 1.2.0 to 1.11.12 (1.11.13 is outside it) - CVE-2019-1298: 1.2.0 to 1.11.12 (1.11.13 is outside it) - CVE-2019-1237: 1.2.0 to 1.11.12 (1.11.13 is outside it) - CVE-2019-1217: 1.2.0 to 1.11.12 (1.11.13 is outside it) - CVE-2019-1138: 1.2.0 to 1.11.12 (1.11.13 is outside it) - CVE-2019-1197: 1.2.0 to 1.11.11 (1.11.12 is outside it) - CVE-2019-1196: 1.2.0 to 1.11.11 (1.11.12 is outside it) - CVE-2019-1195: 1.2.0 to 1.11.11 (1.11.12 is outside it) - CVE-2019-1141: 1.2.0 to 1.11.11 (1.11.12 is outside it) - CVE-2019-1140: 1.2.0 to 1.11.11 (1.11.12 is outside it) - CVE-2019-1139: 1.2.0 to 1.11.11 (1.11.12 is outside it) - CVE-2019-1131: 1.2.0 to 1.11.11 (1.11.12 is outside it) - CVE-2019-1107: 1.2.0 to 1.11.10 (1.11.11 is outside it) - CVE-2019-1106: 1.2.0 to 1.11.10 (1.11.11 is outside it) - CVE-2019-1103: 1.2.0 to 1.11.10 (1.11.11 is outside it) - CVE-2019-1092: 1.2.0 to 1.11.10 (1.11.11 is outside it) - CVE-2019-1062: 1.2.0 to 1.11.10 (1.11.11 is outside it) - CVE-2019-1052: 1.2.0 to 1.11.9 (1.11.10 is outside it) - CVE-2019-1051: 1.2.0 to 1.11.9 (1.11.10 is outside it) - CVE-2019-1024: 1.2.0 to 1.11.9 (1.11.10 is outside it) - CVE-2019-1003: 1.2.0 to 1.11.9 (1.11.10 is outside it) - CVE-2019-1002: 1.2.0 to 1.11.9 (1.11.10 is outside it) - CVE-2019-0993: 1.2.0 to 1.11.9 (1.11.10 is outside it) - CVE-2019-0992: 1.2.0 to 1.11.9 (1.11.10 is outside it) - CVE-2019-0991: 1.2.0 to 1.11.9 (1.11.10 is outside it) - CVE-2019-0989: 1.2.0 to 1.11.9 (1.11.10 is outside it) - CVE-2019-0937: 1.2.0 to 1.11.8 (1.11.9 is outside it) - CVE-2019-0933: 1.2.0 to 1.11.8 (1.11.9 is outside it) - CVE-2019-0927: 1.2.0 to 1.11.8 (1.11.9 is outside it) - CVE-2019-0925: 1.2.0 to 1.11.8 (1.11.9 is outside it) - CVE-2019-0924: 1.2.0 to 1.11.8 (1.11.9 is outside it) - CVE-2019-0923: 1.2.0 to 1.11.8 (1.11.9 is outside it) - CVE-2019-0922: 1.2.0 to 1.11.8 (1.11.9 is outside it) - CVE-2019-0917: 1.2.0 to 1.11.8 (1.11.9 is outside it) - CVE-2019-0916: 1.2.0 to 1.11.8 (1.11.9 is outside it) - CVE-2019-0915: 1.2.0 to 1.11.8 (1.11.9 is outside it) - CVE-2019-0914: 1.2.0 to 1.11.8 (1.11.9 is outside it) - CVE-2019-0913: 1.2.0 to 1.11.8 (1.11.9 is outside it) - CVE-2019-0912: 1.2.0 to 1.11.8 (1.11.9 is outside it) - CVE-2019-0911: 1.2.0 to 1.11.8 (1.11.9 is outside it) - CVE-2019-0861: 1.2.0 to 1.11.7 (1.11.8 is outside it) - CVE-2019-0860: 1.2.0 to 1.11.7 (1.11.8 is outside it) - CVE-2019-0829: 1.2.0 to 1.11.7 (1.11.8 is outside it) - CVE-2019-0812: 1.2.0 to 1.11.7 (1.11.8 is outside it) - CVE-2019-0810: 1.2.0 to 1.11.7 (1.11.8 is outside it) - CVE-2019-0806: 1.2.0 to 1.11.7 (1.11.8 is outside it) - CVE-2019-0771: 1.2.0 to 1.11.6 (1.11.7 is outside it) - CVE-2019-0773: 1.2.0 to 1.11.6 (1.11.7 is outside it) - CVE-2019-0769: 1.2.0 to 1.11.6 (1.11.7 is outside it) - CVE-2019-0746: 1.2.0 to 1.11.6 (1.11.7 is outside it) - CVE-2019-0639: 1.2.0 to 1.11.6 (1.11.7 is outside it) - CVE-2019-0611: 1.2.0 to 1.11.6 (1.11.7 is outside it) - CVE-2019-0609: 1.2.0 to 1.11.6 (1.11.7 is outside it) - CVE-2019-0592: 1.2.0 to 1.11.6 (1.11.7 is outside it) - CVE-2019-0649: 1.2.0 to 1.11.5 (1.11.6 is outside it) - CVE-2019-0648: 1.2.0 to 1.11.5 (1.11.6 is outside it) - CVE-2019-0568: 1.2.0 to 1.11.4 (1.11.5 is outside it) - CVE-2019-0567: 1.2.0 to 1.11.4 (1.11.5 is outside it) - CVE-2019-0539: 1.2.0 to 1.11.4 (1.11.5 is outside it) - CVE-2018-8629: 1.2.0 to 1.11.3 (1.11.4 is outside it) - CVE-2018-8624: 1.2.0 to 1.11.3 (1.11.4 is outside it) - CVE-2018-8618: 1.2.0 to 1.11.3 (1.11.4 is outside it) - CVE-2018-8617: 1.2.0 to 1.11.2 (1.11.3 is outside it) - CVE-2018-8583: 1.2.0 to 1.11.2 (1.11.3 is outside it) - CVE-2018-8588: 1.2.0 to 1.11.2 (1.11.3 is outside it) - CVE-2018-8557: 1.2.0 to 1.11.2 (1.11.3 is outside it) - CVE-2018-8556: 1.2.0 to 1.11.2 (1.11.3 is outside it) - CVE-2018-8555: 1.2.0 to 1.11.2 (1.11.3 is outside it) - CVE-2018-8551: 1.2.0 to 1.11.2 (1.11.3 is outside it) - CVE-2018-8543: 1.2.0 to 1.11.2 (1.11.3 is outside it) - CVE-2018-8542: 1.2.0 to 1.11.2 (1.11.3 is outside it) - CVE-2018-8541: 1.2.0 to 1.11.2 (1.11.3 is outside it) - CVE-2018-8513: 1.2.0 to 1.11.1 (1.11.2 is outside it) - CVE-2018-8511: 1.2.0 to 1.11.1 (1.11.2 is outside it) - CVE-2018-8510: 1.2.0 to 1.11.1 (1.11.2 is outside it) - CVE-2018-8505: 1.2.0 to 1.11.1 (1.11.2 is outside it) - CVE-2018-8503: 1.2.0 to 1.11.1 (1.11.2 is outside it) - CVE-2018-8500: 1.2.0 to 1.11.1 (1.11.2 is outside it) - CVE-2018-8467: 1.2.0 to 1.11.0 (1.11.1 is outside it) - CVE-2018-8466: 1.2.0 to 1.11.0 (1.11.1 is outside it) - CVE-2018-8465: 1.2.0 to 1.11.0 (1.11.1 is outside it) - CVE-2018-8459: 1.2.0 to 1.11.0 (1.11.1 is outside it) - CVE-2018-8456: 1.2.0 to 1.11.0 (1.11.1 is outside it) - CVE-2018-8452: 1.2.0 to 1.11.0 (1.11.1 is outside it) - CVE-2018-8391: 1.2.0 to 1.11.0 (1.11.1 is outside it) - CVE-2018-8367: 1.2.0 to 1.11.0 (1.11.1 is outside it) - CVE-2018-8354: 1.2.0 to 1.11.0 (1.11.1 is outside it) - CVE-2018-8315: 1.2.0 to 1.11.0 (1.11.1 is outside it) - CVE-2018-8390: 1.2.0 to 1.10.1 (1.10.2 is outside it) - CVE-2018-8385: 1.2.0 to 1.10.1 (1.10.2 is outside it) - CVE-2018-8384: 1.2.0 to 1.10.1 (1.10.2 is outside it) - CVE-2018-8381: 1.2.0 to 1.10.1 (1.10.2 is outside it) - CVE-2018-8380: 1.2.0 to 1.10.1 (1.10.2 is outside it) - CVE-2018-8372: 1.2.0 to 1.10.1 (1.10.2 is outside it) - CVE-2018-8371: 1.2.0 to 1.10.0 (1.10.1 is outside it) - CVE-2018-8359: 1.2.0 to 1.10.1 (1.10.2 is outside it) - CVE-2018-8355: 1.2.0 to 1.10.1 (1.10.2 is outside it) - CVE-2018-8266: 1.2.0 to 1.10.1 (1.10.2 is outside it) - CVE-2018-8298: 1.2.0 to 1.10.0 (1.10.1 is outside it) - CVE-2018-8294: 1.2.0 to 1.10.0 (1.10.1 is outside it) - CVE-2018-8291: 1.2.0 to 1.10.0 (1.10.1 is outside it) - CVE-2018-8290: 1.2.0 to 1.10.0 (1.10.1 is outside it) - CVE-2018-8288: 1.2.0 to 1.10.0 (1.10.1 is outside it) - CVE-2018-8287: 1.2.0 to 1.10.0 (1.10.1 is outside it) - CVE-2018-8286: 1.2.0 to 1.10.0 (1.10.1 is outside it) - CVE-2018-8283: 1.2.0 to 1.10.0 (1.10.1 is outside it) - CVE-2018-8280: 1.2.0 to 1.10.0 (1.10.1 is outside it) - CVE-2018-8276: 1.2.0 to 1.10.0 (1.10.1 is outside it) - CVE-2018-8243: 1.2.0 to 1.8.4 (1.8.5 is outside it) - CVE-2018-8229: 1.2.0 to 1.8.4 (1.8.5 is outside it) - CVE-2018-8227: 1.2.0 to 1.8.4 (1.8.5 is outside it) - CVE-2018-8177: 1.2.0 to 1.8.3 (1.8.4 is outside it) - CVE-2018-8145: 1.2.0 to 1.8.3 (1.8.4 is outside it) - CVE-2018-8139: 1.2.0 to 1.8.3 (1.8.4 is outside it) - CVE-2018-8137: 1.2.0 to 1.8.3 (1.8.4 is outside it) - CVE-2018-8133: 1.2.0 to 1.8.3 (1.8.4 is outside it) - CVE-2018-8130: 1.2.0 to 1.8.3 (1.8.4 is outside it) - CVE-2018-1022: 1.2.0 to 1.8.3 (1.8.4 is outside it) - CVE-2018-0954: 1.2.0 to 1.8.3 (1.8.4 is outside it) - CVE-2018-0946: 1.2.0 to 1.8.3 (1.8.4 is outside it) - CVE-2018-0945: 1.2.0 to 1.8.3 (1.8.4 is outside it) - CVE-2018-0943: 1.2.0 to 1.8.3 (1.8.4 is outside it) - CVE-2018-1019: 1.2.0 to 1.8.2 (1.8.3 is outside it) - CVE-2018-0995: 1.2.0 to 1.8.2 (1.8.3 is outside it) - CVE-2018-0994: 1.2.0 to 1.8.2 (1.8.3 is outside it) - CVE-2018-0993: 1.2.0 to 1.8.2 (1.8.3 is outside it) - CVE-2018-0990: 1.2.0 to 1.8.2 (1.8.3 is outside it) - CVE-2018-0980: 1.2.0 to 1.8.2 (1.8.3 is outside it) - CVE-2018-0979: 1.2.0 to 1.8.2 (1.8.3 is outside it) - CVE-2018-0939: 1.2.0 to 1.8.1 (1.8.2 is outside it) - CVE-2018-0937: 1.2.0 to 1.8.1 (1.8.2 is outside it) - CVE-2018-0936: 1.2.0 to 1.8.1 (1.8.2 is outside it) - CVE-2018-0934: 1.2.0 to 1.8.1 (1.8.2 is outside it) - CVE-2018-0933: 1.2.0 to 1.8.1 (1.8.2 is outside it) - CVE-2018-0931: 1.2.0 to 1.8.1 (1.8.2 is outside it) - CVE-2018-0930: 1.2.0 to 1.8.1 (1.8.2 is outside it) - CVE-2018-0925: 1.2.0 to 1.8.1 (1.8.2 is outside it) - CVE-2018-0874: 1.2.0 to 1.8.1 (1.8.2 is outside it) - CVE-2018-0873: 1.2.0 to 1.8.1 (1.8.2 is outside it) - CVE-2018-0872: 1.2.0 to 1.8.1 (1.8.2 is outside it) - CVE-2018-0860: 1.2.0 to 1.8.0 (1.8.1 is outside it) - CVE-2018-0859: 1.2.0 to 1.8.0 (1.8.1 is outside it) - CVE-2018-0858: 1.2.0 to 1.8.0 (1.8.1 is outside it) - CVE-2018-0857: 1.2.0 to 1.8.0 (1.8.1 is outside it) - CVE-2018-0856: 1.2.0 to 1.8.0 (1.8.1 is outside it) - CVE-2018-0838: 1.2.0 to 1.8.0 (1.8.1 is outside it) - CVE-2018-0837: 1.2.0 to 1.8.0 (1.8.1 is outside it) - CVE-2018-0836: 1.2.0 to 1.8.0 (1.8.1 is outside it) - CVE-2018-0835: 1.2.0 to 1.8.0 (1.8.1 is outside it) - CVE-2018-0834: 1.2.0 to 1.8.0 (1.8.1 is outside it) - CVE-2018-0818: 1.2.0 to 1.7.6 (1.8.0 is outside it) - CVE-2017-11916: 1.2.0 to 1.7.4 (1.7.5 is outside it) - CVE-2017-11914: 1.2.0 to 1.7.4 (1.7.5 is outside it) - CVE-2017-11911: 1.2.0 to 1.7.4 (1.7.5 is outside it) - CVE-2017-11910: 1.2.0 to 1.7.4 (1.7.5 is outside it) - CVE-2017-11909: 1.2.0 to 1.7.4 (1.7.5 is outside it) - CVE-2017-11908: 1.2.0 to 1.7.4 (1.7.5 is outside it) - CVE-2017-11905: 1.2.0 to 1.7.4 (1.7.5 is outside it) - CVE-2017-11893: 1.2.0 to 1.7.4 (1.7.5 is outside it) - CVE-2017-11889: 1.2.0 to 1.7.4 (1.7.5 is outside it) - CVE-2017-11871: 1.2.0 to 1.7.3 (1.7.4 is outside it) - CVE-2017-11870: 1.2.0 to 1.7.3 (1.7.4 is outside it) - CVE-2017-11862: 1.2.0 to 1.7.3 (1.7.4 is outside it) - CVE-2017-11767: 1.2.0 to 1.6.0 (1.6.2 is outside it) - CVE-2017-11821: 1.2.0 to 1.7.2 (1.7.3 is outside it) - CVE-2017-11807: 1.2.0 to 1.7.2 (1.7.3 is outside it) - CVE-2017-11806: 1.2.0 to 1.7.2 (1.7.3 is outside it) - CVE-2017-11805: 1.2.0 to 1.7.2 (1.7.3 is outside it) - CVE-2017-11801: 1.2.0 to 1.7.2 (1.7.3 is outside it) - CVE-2017-11797: 1.2.0 to 1.7.2 (1.7.3 is outside it) - CVE-2017-11796: 1.2.0 to 1.7.2 (1.7.3 is outside it) - CVE-2017-11792: 1.2.0 to 1.7.2 (1.7.3 is outside it) - CVE-2017-8658: 1.2.0 to 1.6.0 (1.6.2 is outside it) - CVE-2017-8659: 1.2.0 to 1.6.0 (1.6.2 is outside it) - CVE-2017-0252: 1.2.0 to 1.4.3 (1.4.4 is outside it) - CVE-2017-0223: 1.2.0 to 1.4.3 (1.4.4 is outside it) - CVE-2017-0236: 1.2.0 to 1.4.3 (1.4.4 is outside it) - CVE-2017-0235: 1.2.0 to 1.4.3 (1.4.4 is outside it) - CVE-2017-0234: 1.2.0 to 1.4.3 (1.4.4 is outside it) - CVE-2017-0224: 1.2.0 to 1.4.3 (1.4.4 is outside it) - CVE-2017-0208: 1.2.0 to 1.4.2 (1.4.3 is outside it) - CVE-2016-7243: 1.2.0 to 1.2.1 (1.2.2 is outside it) - CVE-2016-7242: 1.2.0 to 1.2.1 (1.2.2 is outside it) - CVE-2016-7240: 1.2.0 to 1.2.1 (1.2.2 is outside it) - CVE-2016-7208: 1.2.0 to 1.2.1 (1.2.2 is outside it) - CVE-2016-7203: 1.2.0 to 1.2.1 (1.2.2 is outside it) - CVE-2016-7202: 1.2.0 to 1.2.1 (1.2.2 is outside it) - CVE-2016-7201: 1.2.0 to 1.2.1 (1.2.2 is outside it) - CVE-2016-7200: 1.2.0 to 1.2.1 (1.2.2 is outside it) - CVE-2016-7194: 1.2.0 to 1.2.1 (1.2.2 is outside it) - CVE-2016-7190: 1.2.0 to 1.2.1 (1.2.2 is outside it) - CVE-2016-7189: 1.2.0 (1.2.1 is outside it) - CVE-2016-3390: 1.2.0 (1.2.1 is outside it) - CVE-2016-3389: 1.2.0 (1.2.1 is outside it) - CVE-2016-3386: 1.2.0 (1.2.1 is outside it) - CVE-2016-3382: 1.2.0 (1.2.1 is outside it) - CVE-2016-3377: 1.2.0 (1.2.1 is outside it) - CVE-2016-3350: 1.2.0 (1.2.1 is outside it) - CVE-2016-3296: 1.2.0 (1.2.1 is outside it) - CVE-2016-3269: no published release is affected - CVE-2016-3265: no published release is affected - CVE-2016-3260: no published release is affected - CVE-2016-3259: no published release is affected - CVE-2016-3248: 1.2.0 (1.2.1 is outside it) - CVE-2016-3214: 1.2.0 to 1.2.6.62716-preview (1.3.0 is outside it) - CVE-2016-3202: no published release is affected - CVE-2016-3199: no published release is affected - CVE-2016-0193: no published release is affected - CVE-2016-0191: no published release is affected - CVE-2016-0186: no published release is affected - CVE-2016-0024: no published release is affected ## Advisories (247) ### [CVE-2021-42279](https://cve.now/CVE-2021-42279): Chakra Scripting Engine Memory Corruption Vulnerability - Severity: Medium 4.2 - Published: Nov 10, 2021 - Affected: through 1.11.24. - No fix released. The latest release, 1.11.24, is still affected. ### [CVE-2020-17131](https://cve.now/CVE-2020-17131): Chakra Scripting Engine Memory Corruption Vulnerability - Severity: Medium 4.2 - Published: Dec 9, 2020 - Affected: fixed in 1.11.24. - Fixed in 1.11.24 (released Dec 8, 2020, 1 day before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2020-17054](https://cve.now/CVE-2020-17054): Chakra Scripting Engine Memory Corruption Vulnerability - Severity: Medium 4.2 - Published: Nov 11, 2020 - Affected: fixed in 1.11.23. - Fixed in 1.11.23 (released Nov 10, 2020, 1 day before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2020-17048](https://cve.now/CVE-2020-17048): Chakra Scripting Engine Memory Corruption Vulnerability - Severity: Medium 4.2 - Published: Nov 11, 2020 - Affected: fixed in 1.11.23. - Fixed in 1.11.23 (released Nov 10, 2020, 1 day before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2020-1180](https://cve.now/CVE-2020-1180): Scripting Engine Memory Corruption Vulnerability - Severity: Medium 4.2 - Published: Sep 11, 2020 - Affected: fixed in 1.11.22. - Fixed in 1.11.22 (released Sep 8, 2020, 3 days before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2020-1172](https://cve.now/CVE-2020-1172): Scripting Engine Memory Corruption Vulnerability - Severity: Medium 4.2 - Published: Sep 11, 2020 - Affected: fixed in 1.11.22. - Fixed in 1.11.22 (released Sep 8, 2020, 3 days before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2020-1057](https://cve.now/CVE-2020-1057): Scripting Engine Memory Corruption Vulnerability - Severity: Medium 4.2 - Published: Sep 11, 2020 - Affected: fixed in 1.11.22. - Fixed in 1.11.22 (released Sep 8, 2020, 3 days before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2020-1073](https://cve.now/CVE-2020-1073): A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting… - Severity: Unrated - Published: Jun 9, 2020 - Affected: fixed in 1.11.20. - Fixed in 1.11.20 (released Jun 10, 2020, 1 day after disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2020-1065](https://cve.now/CVE-2020-1065): Scripting Engine Memory Corruption Vulnerability - Severity: Medium 4.2 - Published: May 21, 2020 - Affected: fixed in 1.11.19. - Fixed in 1.11.19 (released May 12, 2020, 9 days before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2020-1037](https://cve.now/CVE-2020-1037): Chakra Scripting Engine Memory Corruption Vulnerability - Severity: Medium 4.2 - Published: May 21, 2020 - Affected: fixed in 1.11.19. - Fixed in 1.11.19 (released May 12, 2020, 9 days before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2020-0970](https://cve.now/CVE-2020-0970): A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting… - Severity: Unrated - Published: Apr 15, 2020 - Affected: fixed in 1.11.18. - Fixed in 1.11.18 (released Apr 15, 2020, the day of disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2020-0969](https://cve.now/CVE-2020-0969): A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge… - Severity: Unrated - Published: Apr 15, 2020 - Affected: fixed in 1.11.18. - Fixed in 1.11.18 (released Apr 15, 2020, the day of disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2020-0848](https://cve.now/CVE-2020-0848): A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting… - Severity: Unrated - Published: Mar 12, 2020 - Affected: fixed in 1.11.17. - Fixed in 1.11.17 (released Mar 10, 2020, 2 days before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2020-0833](https://cve.now/CVE-2020-0833): A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka… - Severity: Unrated - Published: Mar 12, 2020 - Affected: fixed in 1.11.17. - Fixed in 1.11.17 (released Mar 10, 2020, 2 days before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2020-0832](https://cve.now/CVE-2020-0832): A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka… - Severity: Unrated - Published: Mar 12, 2020 - Affected: fixed in 1.11.17. - Fixed in 1.11.17 (released Mar 10, 2020, 2 days before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2020-0831](https://cve.now/CVE-2020-0831): A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting… - Severity: Unrated - Published: Mar 12, 2020 - Affected: fixed in 1.11.17. - Fixed in 1.11.17 (released Mar 10, 2020, 2 days before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2020-0830](https://cve.now/CVE-2020-0830): A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka… - Severity: Unrated - Published: Mar 12, 2020 - Affected: fixed in 1.11.17. - Fixed in 1.11.17 (released Mar 10, 2020, 2 days before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2020-0829](https://cve.now/CVE-2020-0829): A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting… - Severity: Unrated - Published: Mar 12, 2020 - Affected: fixed in 1.11.17. - Fixed in 1.11.17 (released Mar 10, 2020, 2 days before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2020-0828](https://cve.now/CVE-2020-0828): A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting… - Severity: Unrated - Published: Mar 12, 2020 - Affected: fixed in 1.11.17. - Fixed in 1.11.17 (released Mar 10, 2020, 2 days before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2020-0827](https://cve.now/CVE-2020-0827): A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting… - Severity: Unrated - Published: Mar 12, 2020 - Affected: fixed in 1.11.17. - Fixed in 1.11.17 (released Mar 10, 2020, 2 days before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2020-0826](https://cve.now/CVE-2020-0826): A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting… - Severity: Unrated - Published: Mar 12, 2020 - Affected: fixed in 1.11.17. - Fixed in 1.11.17 (released Mar 10, 2020, 2 days before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2020-0825](https://cve.now/CVE-2020-0825): A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting… - Severity: Unrated - Published: Mar 12, 2020 - Affected: fixed in 1.11.17. - Fixed in 1.11.17 (released Mar 10, 2020, 2 days before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2020-0823](https://cve.now/CVE-2020-0823): A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting… - Severity: Unrated - Published: Mar 12, 2020 - Affected: fixed in 1.11.17. - Fixed in 1.11.17 (released Mar 10, 2020, 2 days before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2020-0813](https://cve.now/CVE-2020-0813): An information disclosure vulnerability exists when Chakra improperly discloses the contents of its memory, which could provide an… - Severity: Unrated - Published: Mar 12, 2020 - Affected: fixed in 1.11.17. - Fixed in 1.11.17 (released Mar 10, 2020, 2 days before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2020-0812](https://cve.now/CVE-2020-0812): A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge… - Severity: Unrated - Published: Mar 12, 2020 - Affected: fixed in 1.11.17. - Fixed in 1.11.17 (released Mar 10, 2020, 2 days before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2020-0811](https://cve.now/CVE-2020-0811): A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge… - Severity: Unrated - Published: Mar 12, 2020 - Affected: fixed in 1.11.17. - Fixed in 1.11.17 (released Mar 10, 2020, 2 days before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2020-0768](https://cve.now/CVE-2020-0768): A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka… - Severity: Unrated - Published: Mar 12, 2020 - Affected: fixed in 1.11.17. - Fixed in 1.11.17 (released Mar 10, 2020, 2 days before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2020-0767](https://cve.now/CVE-2020-0767): A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting… - Severity: Unrated - Published: Feb 11, 2020 - Affected: fixed in 1.11.16. - Fixed in 1.11.16 (released Feb 12, 2020, 1 day after disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2020-0713](https://cve.now/CVE-2020-0713): A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting… - Severity: Unrated - Published: Feb 11, 2020 - Affected: fixed in 1.11.16. - Fixed in 1.11.16 (released Feb 12, 2020, 1 day after disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2020-0712](https://cve.now/CVE-2020-0712): A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting… - Severity: Unrated - Published: Feb 11, 2020 - Affected: fixed in 1.11.16. - Fixed in 1.11.16 (released Feb 12, 2020, 1 day after disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2020-0711](https://cve.now/CVE-2020-0711): A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting… - Severity: Unrated - Published: Feb 11, 2020 - Affected: fixed in 1.11.16. - Fixed in 1.11.16 (released Feb 12, 2020, 1 day after disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2020-0710](https://cve.now/CVE-2020-0710): A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting… - Severity: Unrated - Published: Feb 11, 2020 - Affected: fixed in 1.11.16. - Fixed in 1.11.16 (released Feb 12, 2020, 1 day after disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2019-1366](https://cve.now/CVE-2019-1366): A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka… - Severity: Unrated - Published: Oct 10, 2019 - Affected: fixed in 1.11.14. - Fixed in 1.11.14 (released Oct 8, 2019, 2 days before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2019-1335](https://cve.now/CVE-2019-1335): A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka… - Severity: Unrated - Published: Oct 10, 2019 - Affected: fixed in 1.11.14. - Fixed in 1.11.14 (released Oct 8, 2019, 2 days before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2019-1308](https://cve.now/CVE-2019-1308): A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka… - Severity: Unrated - Published: Oct 10, 2019 - Affected: fixed in 1.11.14. - Fixed in 1.11.14 (released Oct 8, 2019, 2 days before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2019-1307](https://cve.now/CVE-2019-1307): A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka… - Severity: Unrated - Published: Oct 10, 2019 - Affected: fixed in 1.11.14. - Fixed in 1.11.14 (released Oct 8, 2019, 2 days before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2019-1300](https://cve.now/CVE-2019-1300): A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka… - Severity: Unrated - Published: Sep 11, 2019 - Affected: fixed in 1.11.13. - Fixed in 1.11.13 (released Sep 11, 2019, the day of disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2019-1298](https://cve.now/CVE-2019-1298): A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka… - Severity: Unrated - Published: Sep 11, 2019 - Affected: fixed in 1.11.13. - Fixed in 1.11.13 (released Sep 11, 2019, the day of disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2019-1237](https://cve.now/CVE-2019-1237): A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka… - Severity: Unrated - Published: Sep 11, 2019 - Affected: fixed in 1.11.13. - Fixed in 1.11.13 (released Sep 11, 2019, the day of disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2019-1217](https://cve.now/CVE-2019-1217): A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka… - Severity: Unrated - Published: Sep 11, 2019 - Affected: fixed in 1.11.13. - Fixed in 1.11.13 (released Sep 11, 2019, the day of disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2019-1138](https://cve.now/CVE-2019-1138): A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka… - Severity: Unrated - Published: Sep 11, 2019 - Affected: fixed in 1.11.13. - Fixed in 1.11.13 (released Sep 11, 2019, the day of disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2019-1197](https://cve.now/CVE-2019-1197): Chakra Scripting Engine Memory Corruption Vulnerability - Severity: Medium 4.2 - Published: Aug 14, 2019 - Affected: fixed in 1.11.12. - Fixed in 1.11.12 (released Aug 13, 2019, 1 day before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2019-1196](https://cve.now/CVE-2019-1196): Chakra Scripting Engine Memory Corruption Vulnerability - Severity: Medium 4.2 - Published: Aug 14, 2019 - Affected: fixed in 1.11.12. - Fixed in 1.11.12 (released Aug 13, 2019, 1 day before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2019-1195](https://cve.now/CVE-2019-1195): Chakra Scripting Engine Memory Corruption Vulnerability - Severity: Medium 4.2 - Published: Aug 14, 2019 - Affected: fixed in 1.11.12. - Fixed in 1.11.12 (released Aug 13, 2019, 1 day before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2019-1141](https://cve.now/CVE-2019-1141): Chakra Scripting Engine Memory Corruption Vulnerability - Severity: Medium 4.2 - Published: Aug 14, 2019 - Affected: fixed in 1.11.12. - Fixed in 1.11.12 (released Aug 13, 2019, 1 day before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2019-1140](https://cve.now/CVE-2019-1140): Chakra Scripting Engine Memory Corruption Vulnerability - Severity: High 8.8 - Published: Aug 14, 2019 - Affected: fixed in 1.11.12. - Fixed in 1.11.12 (released Aug 13, 2019, 1 day before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2019-1139](https://cve.now/CVE-2019-1139): Chakra Scripting Engine Memory Corruption Vulnerability - Severity: Medium 4.2 - Published: Aug 14, 2019 - Affected: fixed in 1.11.12. - Fixed in 1.11.12 (released Aug 13, 2019, 1 day before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2019-1131](https://cve.now/CVE-2019-1131): Chakra Scripting Engine Memory Corruption Vulnerability - Severity: Medium 4.2 - Published: Aug 14, 2019 - Affected: fixed in 1.11.12. - Fixed in 1.11.12 (released Aug 13, 2019, 1 day before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2019-1107](https://cve.now/CVE-2019-1107): A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka… - Severity: Unrated - Published: Jul 29, 2019 - Affected: fixed in 1.11.11. - Fixed in 1.11.11 (released Jul 9, 2019, 20 days before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2019-1106](https://cve.now/CVE-2019-1106): A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka… - Severity: Unrated - Published: Jul 29, 2019 - Affected: fixed in 1.11.11. - Fixed in 1.11.11 (released Jul 9, 2019, 20 days before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2019-1103](https://cve.now/CVE-2019-1103): A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka… - Severity: Unrated - Published: Jul 29, 2019 - Affected: fixed in 1.11.11. - Fixed in 1.11.11 (released Jul 9, 2019, 20 days before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2019-1092](https://cve.now/CVE-2019-1092): A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka… - Severity: Unrated - Published: Jul 15, 2019 - Affected: fixed in 1.11.11. - Fixed in 1.11.11 (released Jul 9, 2019, 6 days before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2019-1062](https://cve.now/CVE-2019-1062): A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka… - Severity: Unrated - Published: Jul 15, 2019 - Affected: fixed in 1.11.11. - Fixed in 1.11.11 (released Jul 9, 2019, 6 days before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2019-1052](https://cve.now/CVE-2019-1052): Chakra Scripting Engine Memory Corruption Vulnerability - Severity: Medium 4.2 - Published: Jun 12, 2019 - Affected: fixed in 1.11.10. - Fixed in 1.11.10 (released Jun 12, 2019, the day of disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2019-1051](https://cve.now/CVE-2019-1051): Chakra Scripting Engine Memory Corruption Vulnerability - Severity: Medium 4.2 - Published: Jun 12, 2019 - Affected: fixed in 1.11.10. - Fixed in 1.11.10 (released Jun 12, 2019, the day of disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2019-1024](https://cve.now/CVE-2019-1024): Chakra Scripting Engine Memory Corruption Vulnerability - Severity: Medium 4.2 - Published: Jun 12, 2019 - Affected: fixed in 1.11.10. - Fixed in 1.11.10 (released Jun 12, 2019, the day of disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2019-1003](https://cve.now/CVE-2019-1003): Chakra Scripting Engine Memory Corruption Vulnerability - Severity: Medium 4.2 - Published: Jun 12, 2019 - Affected: fixed in 1.11.10. - Fixed in 1.11.10 (released Jun 12, 2019, the day of disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2019-1002](https://cve.now/CVE-2019-1002): Chakra Scripting Engine Memory Corruption Vulnerability - Severity: Medium 4.2 - Published: Jun 12, 2019 - Affected: fixed in 1.11.10. - Fixed in 1.11.10 (released Jun 12, 2019, the day of disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2019-0993](https://cve.now/CVE-2019-0993): Chakra Scripting Engine Memory Corruption Vulnerability - Severity: Medium 4.2 - Published: Jun 12, 2019 - Affected: fixed in 1.11.10. - Fixed in 1.11.10 (released Jun 12, 2019, the day of disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2019-0992](https://cve.now/CVE-2019-0992): Chakra Scripting Engine Memory Corruption Vulnerability - Severity: Medium 4.2 - Published: Jun 12, 2019 - Affected: fixed in 1.11.10. - Fixed in 1.11.10 (released Jun 12, 2019, the day of disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2019-0991](https://cve.now/CVE-2019-0991): Chakra Scripting Engine Memory Corruption Vulnerability - Severity: Medium 4.2 - Published: Jun 12, 2019 - Affected: fixed in 1.11.10. - Fixed in 1.11.10 (released Jun 12, 2019, the day of disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2019-0989](https://cve.now/CVE-2019-0989): Chakra Scripting Engine Memory Corruption Vulnerability - Severity: Medium 4.2 - Published: Jun 12, 2019 - Affected: fixed in 1.11.10. - Fixed in 1.11.10 (released Jun 12, 2019, the day of disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2019-0937](https://cve.now/CVE-2019-0937): A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka… - Severity: Unrated - Published: May 16, 2019 - Affected: fixed in 1.11.9. - Fixed in 1.11.9 (released May 14, 2019, 2 days before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2019-0933](https://cve.now/CVE-2019-0933): A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka… - Severity: Unrated - Published: May 16, 2019 - Affected: fixed in 1.11.9. - Fixed in 1.11.9 (released May 14, 2019, 2 days before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2019-0927](https://cve.now/CVE-2019-0927): A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka… - Severity: Unrated - Published: May 16, 2019 - Affected: fixed in 1.11.9. - Fixed in 1.11.9 (released May 14, 2019, 2 days before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2019-0925](https://cve.now/CVE-2019-0925): A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka… - Severity: Unrated - Published: May 16, 2019 - Affected: fixed in 1.11.9. - Fixed in 1.11.9 (released May 14, 2019, 2 days before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2019-0924](https://cve.now/CVE-2019-0924): A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka… - Severity: Unrated - Published: May 16, 2019 - Affected: fixed in 1.11.9. - Fixed in 1.11.9 (released May 14, 2019, 2 days before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2019-0923](https://cve.now/CVE-2019-0923): A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka… - Severity: Unrated - Published: May 16, 2019 - Affected: fixed in 1.11.9. - Fixed in 1.11.9 (released May 14, 2019, 2 days before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2019-0922](https://cve.now/CVE-2019-0922): A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka… - Severity: Unrated - Published: May 16, 2019 - Affected: fixed in 1.11.9. - Fixed in 1.11.9 (released May 14, 2019, 2 days before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2019-0917](https://cve.now/CVE-2019-0917): A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka… - Severity: Unrated - Published: May 16, 2019 - Affected: fixed in 1.11.9. - Fixed in 1.11.9 (released May 14, 2019, 2 days before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2019-0916](https://cve.now/CVE-2019-0916): A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka… - Severity: Unrated - Published: May 16, 2019 - Affected: fixed in 1.11.9. - Fixed in 1.11.9 (released May 14, 2019, 2 days before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2019-0915](https://cve.now/CVE-2019-0915): A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka… - Severity: Unrated - Published: May 16, 2019 - Affected: fixed in 1.11.9. - Fixed in 1.11.9 (released May 14, 2019, 2 days before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2019-0914](https://cve.now/CVE-2019-0914): A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka… - Severity: Unrated - Published: May 16, 2019 - Affected: fixed in 1.11.9. - Fixed in 1.11.9 (released May 14, 2019, 2 days before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2019-0913](https://cve.now/CVE-2019-0913): A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka… - Severity: Unrated - Published: May 16, 2019 - Affected: fixed in 1.11.9. - Fixed in 1.11.9 (released May 14, 2019, 2 days before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2019-0912](https://cve.now/CVE-2019-0912): A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka… - Severity: Unrated - Published: May 16, 2019 - Affected: fixed in 1.11.9. - Fixed in 1.11.9 (released May 14, 2019, 2 days before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2019-0911](https://cve.now/CVE-2019-0911): A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka… - Severity: Unrated - Published: May 16, 2019 - Affected: fixed in 1.11.9. - Fixed in 1.11.9 (released May 14, 2019, 2 days before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2019-0861](https://cve.now/CVE-2019-0861): A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka… - Severity: Unrated - Published: Apr 9, 2019 - Affected: fixed in 1.11.8. - Fixed in 1.11.8 (released Apr 9, 2019, the day of disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2019-0860](https://cve.now/CVE-2019-0860): A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka… - Severity: Unrated - Published: Apr 9, 2019 - Affected: fixed in 1.11.8. - Fixed in 1.11.8 (released Apr 9, 2019, the day of disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2019-0829](https://cve.now/CVE-2019-0829): A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka… - Severity: Unrated - Published: Apr 9, 2019 - Affected: fixed in 1.11.8. - Fixed in 1.11.8 (released Apr 9, 2019, the day of disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2019-0812](https://cve.now/CVE-2019-0812): A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka… - Severity: Unrated - Published: Apr 9, 2019 - Affected: fixed in 1.11.8. - Fixed in 1.11.8 (released Apr 9, 2019, the day of disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2019-0810](https://cve.now/CVE-2019-0810): A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka… - Severity: Unrated - Published: Apr 9, 2019 - Affected: fixed in 1.11.8. - Fixed in 1.11.8 (released Apr 9, 2019, the day of disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2019-0806](https://cve.now/CVE-2019-0806): A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka… - Severity: Unrated - Published: Apr 9, 2019 - Affected: fixed in 1.11.8. - Fixed in 1.11.8 (released Apr 9, 2019, the day of disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2019-0771](https://cve.now/CVE-2019-0771): A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka… - Severity: Unrated - Published: Apr 9, 2019 - Affected: fixed in 1.11.7. - Fixed in 1.11.7 (released Mar 12, 2019, 28 days before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2019-0773](https://cve.now/CVE-2019-0773): A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka… - Severity: Unrated - Published: Apr 9, 2019 - Affected: fixed in 1.11.7. - Fixed in 1.11.7 (released Mar 12, 2019, 28 days before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2019-0769](https://cve.now/CVE-2019-0769): A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka… - Severity: Unrated - Published: Apr 9, 2019 - Affected: fixed in 1.11.7. - Fixed in 1.11.7 (released Mar 12, 2019, 28 days before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2019-0746](https://cve.now/CVE-2019-0746): An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory in Microsoft Edge, aka… - Severity: Unrated - Published: Apr 8, 2019 - Affected: fixed in 1.11.7. - Fixed in 1.11.7 (released Mar 12, 2019, 27 days before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2019-0639](https://cve.now/CVE-2019-0639): A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting… - Severity: Unrated - Published: Apr 8, 2019 - Affected: fixed in 1.11.7. - Fixed in 1.11.7 (released Mar 12, 2019, 27 days before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2019-0611](https://cve.now/CVE-2019-0611): A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka… - Severity: Unrated - Published: Apr 8, 2019 - Affected: fixed in 1.11.7. - Fixed in 1.11.7 (released Mar 12, 2019, 27 days before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2019-0609](https://cve.now/CVE-2019-0609): A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka… - Severity: Unrated - Published: Apr 8, 2019 - Affected: fixed in 1.11.7. - Fixed in 1.11.7 (released Mar 12, 2019, 27 days before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2019-0592](https://cve.now/CVE-2019-0592): A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka… - Severity: Unrated - Published: Apr 8, 2019 - Affected: fixed in 1.11.7. - Fixed in 1.11.7 (released Mar 12, 2019, 27 days before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2019-0649](https://cve.now/CVE-2019-0649): A vulnerability exists in Microsoft Chakra JIT server, aka 'Scripting Engine Elevation of Privileged Vulnerability'. - Severity: Unrated - Published: Mar 6, 2019 - Affected: fixed in 1.11.6. - Fixed in 1.11.6 (released Feb 13, 2019, 21 days before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2019-0648](https://cve.now/CVE-2019-0648): An information disclosure vulnerability exists when Chakra improperly discloses the contents of its memory, which could provide an… - Severity: Unrated - Published: Mar 6, 2019 - Affected: fixed in 1.11.6. - Fixed in 1.11.6 (released Feb 13, 2019, 21 days before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2019-0568](https://cve.now/CVE-2019-0568): A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka… - Severity: Unrated - Published: Jan 8, 2019 - Affected: fixed in 1.11.5. - Fixed in 1.11.5 (released Jan 9, 2019, 1 day after disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2019-0567](https://cve.now/CVE-2019-0567): A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka… - Severity: Unrated - Published: Jan 8, 2019 - Affected: fixed in 1.11.5. - Fixed in 1.11.5 (released Jan 9, 2019, 1 day after disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2019-0539](https://cve.now/CVE-2019-0539): A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka… - Severity: Unrated - Published: Jan 8, 2019 - Affected: fixed in 1.11.5. - Fixed in 1.11.5 (released Jan 9, 2019, 1 day after disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2018-8629](https://cve.now/CVE-2018-8629): A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka… - Severity: Unrated - Published: Dec 12, 2018 - Affected: fixed in 1.11.4. - Fixed in 1.11.4 (released Dec 13, 2018, 1 day after disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2018-8624](https://cve.now/CVE-2018-8624): A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka… - Severity: Unrated - Published: Dec 12, 2018 - Affected: fixed in 1.11.4. - Fixed in 1.11.4 (released Dec 13, 2018, 1 day after disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2018-8618](https://cve.now/CVE-2018-8618): A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka… - Severity: Unrated - Published: Dec 12, 2018 - Affected: fixed in 1.11.4. - Fixed in 1.11.4 (released Dec 13, 2018, 1 day after disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2018-8617](https://cve.now/CVE-2018-8617): A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka… - Severity: Unrated - Published: Dec 12, 2018 - Affected: fixed in 1.11.3. - Fixed in 1.11.3 (released Nov 14, 2018, 28 days before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2018-8583](https://cve.now/CVE-2018-8583): A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka… - Severity: Unrated - Published: Dec 12, 2018 - Affected: fixed in 1.11.3. - Fixed in 1.11.3 (released Nov 14, 2018, 28 days before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2018-8588](https://cve.now/CVE-2018-8588): A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka… - Severity: Unrated - Published: Nov 14, 2018 - Affected: fixed in 1.11.3. - Fixed in 1.11.3 (released Nov 14, 2018, the day of disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2018-8557](https://cve.now/CVE-2018-8557): A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka… - Severity: Unrated - Published: Nov 14, 2018 - Affected: fixed in 1.11.3. - Fixed in 1.11.3 (released Nov 14, 2018, the day of disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2018-8556](https://cve.now/CVE-2018-8556): A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka… - Severity: Unrated - Published: Nov 14, 2018 - Affected: fixed in 1.11.3. - Fixed in 1.11.3 (released Nov 14, 2018, the day of disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2018-8555](https://cve.now/CVE-2018-8555): A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka… - Severity: Unrated - Published: Nov 14, 2018 - Affected: fixed in 1.11.3. - Fixed in 1.11.3 (released Nov 14, 2018, the day of disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2018-8551](https://cve.now/CVE-2018-8551): A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka… - Severity: Unrated - Published: Nov 14, 2018 - Affected: fixed in 1.11.3. - Fixed in 1.11.3 (released Nov 14, 2018, the day of disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2018-8543](https://cve.now/CVE-2018-8543): A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka… - Severity: Unrated - Published: Nov 14, 2018 - Affected: fixed in 1.11.3. - Fixed in 1.11.3 (released Nov 14, 2018, the day of disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2018-8542](https://cve.now/CVE-2018-8542): A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka… - Severity: Unrated - Published: Nov 14, 2018 - Affected: fixed in 1.11.3. - Fixed in 1.11.3 (released Nov 14, 2018, the day of disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2018-8541](https://cve.now/CVE-2018-8541): A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka… - Severity: Unrated - Published: Nov 14, 2018 - Affected: fixed in 1.11.3. - Fixed in 1.11.3 (released Nov 14, 2018, the day of disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2018-8513](https://cve.now/CVE-2018-8513): A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka… - Severity: Unrated - Published: Oct 10, 2018 - Affected: fixed in 1.11.2. - Fixed in 1.11.2 (released Oct 9, 2018, 1 day before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2018-8511](https://cve.now/CVE-2018-8511): A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka… - Severity: Unrated - Published: Oct 10, 2018 - Affected: fixed in 1.11.2. - Fixed in 1.11.2 (released Oct 9, 2018, 1 day before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2018-8510](https://cve.now/CVE-2018-8510): A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka… - Severity: Unrated - Published: Oct 10, 2018 - Affected: fixed in 1.11.2. - Fixed in 1.11.2 (released Oct 9, 2018, 1 day before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2018-8505](https://cve.now/CVE-2018-8505): A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka… - Severity: Unrated - Published: Oct 10, 2018 - Affected: fixed in 1.11.2. - Fixed in 1.11.2 (released Oct 9, 2018, 1 day before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2018-8503](https://cve.now/CVE-2018-8503): A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka… - Severity: Unrated - Published: Oct 10, 2018 - Affected: fixed in 1.11.2. - Fixed in 1.11.2 (released Oct 9, 2018, 1 day before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2018-8500](https://cve.now/CVE-2018-8500): A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting… - Severity: Unrated - Published: Oct 10, 2018 - Affected: fixed in 1.11.2. - Fixed in 1.11.2 (released Oct 9, 2018, 1 day before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2018-8467](https://cve.now/CVE-2018-8467): A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka… - Severity: Unrated - Published: Sep 13, 2018 - Affected: fixed in 1.11.1. - Fixed in 1.11.1 (released Sep 12, 2018, 1 day before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2018-8466](https://cve.now/CVE-2018-8466): A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka… - Severity: Unrated - Published: Sep 13, 2018 - Affected: fixed in 1.11.1. - Fixed in 1.11.1 (released Sep 12, 2018, 1 day before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2018-8465](https://cve.now/CVE-2018-8465): A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka… - Severity: Unrated - Published: Sep 13, 2018 - Affected: fixed in 1.11.1. - Fixed in 1.11.1 (released Sep 12, 2018, 1 day before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2018-8459](https://cve.now/CVE-2018-8459): A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting… - Severity: Unrated - Published: Sep 13, 2018 - Affected: fixed in 1.11.1. - Fixed in 1.11.1 (released Sep 12, 2018, 1 day before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2018-8456](https://cve.now/CVE-2018-8456): A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting… - Severity: Unrated - Published: Sep 13, 2018 - Affected: fixed in 1.11.1. - Fixed in 1.11.1 (released Sep 12, 2018, 1 day before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2018-8452](https://cve.now/CVE-2018-8452): An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory in Microsoft browsers… - Severity: Unrated - Published: Sep 13, 2018 - Affected: fixed in 1.11.1. - Fixed in 1.11.1 (released Sep 12, 2018, 1 day before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2018-8391](https://cve.now/CVE-2018-8391): A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting… - Severity: Unrated - Published: Sep 13, 2018 - Affected: fixed in 1.11.1. - Fixed in 1.11.1 (released Sep 12, 2018, 1 day before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2018-8367](https://cve.now/CVE-2018-8367): A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka… - Severity: Unrated - Published: Sep 13, 2018 - Affected: fixed in 1.11.1. - Fixed in 1.11.1 (released Sep 12, 2018, 1 day before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2018-8354](https://cve.now/CVE-2018-8354): A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka… - Severity: Unrated - Published: Sep 13, 2018 - Affected: fixed in 1.11.1. - Fixed in 1.11.1 (released Sep 12, 2018, 1 day before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2018-8315](https://cve.now/CVE-2018-8315): An information disclosure vulnerability exists when the browser scripting engine improperly handle object types, aka "Microsoft Scripting… - Severity: Unrated - Published: Sep 13, 2018 - Affected: fixed in 1.11.1. - Fixed in 1.11.1 (released Sep 12, 2018, 1 day before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2018-8390](https://cve.now/CVE-2018-8390): A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting… - Severity: Unrated - Published: Aug 15, 2018 - Affected: fixed in 1.10.2. - Fixed in 1.10.2 (released Aug 15, 2018, the day of disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2018-8385](https://cve.now/CVE-2018-8385): A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka… - Severity: Unrated - Published: Aug 15, 2018 - Affected: fixed in 1.10.2. - Fixed in 1.10.2 (released Aug 15, 2018, the day of disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2018-8384](https://cve.now/CVE-2018-8384): A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka… - Severity: Unrated - Published: Aug 15, 2018 - Affected: fixed in 1.10.2. - Fixed in 1.10.2 (released Aug 15, 2018, the day of disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2018-8381](https://cve.now/CVE-2018-8381): A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka… - Severity: Unrated - Published: Aug 15, 2018 - Affected: fixed in 1.10.2. - Fixed in 1.10.2 (released Aug 15, 2018, the day of disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2018-8380](https://cve.now/CVE-2018-8380): A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka… - Severity: Unrated - Published: Aug 15, 2018 - Affected: fixed in 1.10.2. - Fixed in 1.10.2 (released Aug 15, 2018, the day of disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2018-8372](https://cve.now/CVE-2018-8372): A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka… - Severity: Unrated - Published: Aug 15, 2018 - Affected: fixed in 1.10.2. - Fixed in 1.10.2 (released Aug 15, 2018, the day of disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2018-8371](https://cve.now/CVE-2018-8371): A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka… - Severity: Unrated - Published: Aug 15, 2018 - Affected: fixed in 1.10.1. - Fixed in 1.10.1 (released Jul 10, 2018, 36 days before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2018-8359](https://cve.now/CVE-2018-8359): A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting… - Severity: Unrated - Published: Aug 15, 2018 - Affected: fixed in 1.10.2. - Fixed in 1.10.2 (released Aug 15, 2018, the day of disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2018-8355](https://cve.now/CVE-2018-8355): A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka… - Severity: Unrated - Published: Aug 15, 2018 - Affected: fixed in 1.10.2. - Fixed in 1.10.2 (released Aug 15, 2018, the day of disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2018-8266](https://cve.now/CVE-2018-8266): A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka… - Severity: Unrated - Published: Aug 15, 2018 - Affected: fixed in 1.10.2. - Fixed in 1.10.2 (released Aug 15, 2018, the day of disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2018-8298](https://cve.now/CVE-2018-8298): A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engin - Severity: High 7.5 · KEV - Published: Jul 11, 2018 - Affected: fixed in 1.10.1. - Fixed in 1.10.1 (released Jul 10, 2018, 1 day before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2018-8294](https://cve.now/CVE-2018-8294): A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka… - Severity: Unrated - Published: Jul 11, 2018 - Affected: fixed in 1.10.1. - Fixed in 1.10.1 (released Jul 10, 2018, 1 day before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2018-8291](https://cve.now/CVE-2018-8291): A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka… - Severity: Unrated - Published: Jul 11, 2018 - Affected: fixed in 1.10.1. - Fixed in 1.10.1 (released Jul 10, 2018, 1 day before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2018-8290](https://cve.now/CVE-2018-8290): A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka… - Severity: Unrated - Published: Jul 11, 2018 - Affected: fixed in 1.10.1. - Fixed in 1.10.1 (released Jul 10, 2018, 1 day before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2018-8288](https://cve.now/CVE-2018-8288): A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka… - Severity: Unrated - Published: Jul 11, 2018 - Affected: fixed in 1.10.1. - Fixed in 1.10.1 (released Jul 10, 2018, 1 day before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2018-8287](https://cve.now/CVE-2018-8287): A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka… - Severity: Unrated - Published: Jul 11, 2018 - Affected: fixed in 1.10.1. - Fixed in 1.10.1 (released Jul 10, 2018, 1 day before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2018-8286](https://cve.now/CVE-2018-8286): A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka… - Severity: Unrated - Published: Jul 11, 2018 - Affected: fixed in 1.10.1. - Fixed in 1.10.1 (released Jul 10, 2018, 1 day before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2018-8283](https://cve.now/CVE-2018-8283): A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting… - Severity: Unrated - Published: Jul 11, 2018 - Affected: fixed in 1.10.1. - Fixed in 1.10.1 (released Jul 10, 2018, 1 day before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2018-8280](https://cve.now/CVE-2018-8280): A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka… - Severity: Unrated - Published: Jul 11, 2018 - Affected: fixed in 1.10.1. - Fixed in 1.10.1 (released Jul 10, 2018, 1 day before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2018-8276](https://cve.now/CVE-2018-8276): A security feature bypass vulnerability exists in the Microsoft Chakra scripting engine that allows Control Flow Guard (CFG) to be… - Severity: Unrated - Published: Jul 11, 2018 - Affected: fixed in 1.10.1. - Fixed in 1.10.1 (released Jul 10, 2018, 1 day before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2018-8243](https://cve.now/CVE-2018-8243): A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting… - Severity: Unrated - Published: Jun 14, 2018 - Affected: fixed in 1.8.5. - Fixed in 1.8.5 (released Jun 12, 2018, 2 days before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2018-8229](https://cve.now/CVE-2018-8229): A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka… - Severity: Unrated - Published: Jun 14, 2018 - Affected: fixed in 1.8.5. - Fixed in 1.8.5 (released Jun 12, 2018, 2 days before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2018-8227](https://cve.now/CVE-2018-8227): A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka… - Severity: Unrated - Published: Jun 14, 2018 - Affected: fixed in 1.8.5. - Fixed in 1.8.5 (released Jun 12, 2018, 2 days before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2018-8177](https://cve.now/CVE-2018-8177): A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka… - Severity: Unrated - Published: May 9, 2018 - Affected: fixed in 1.8.4. - Fixed in 1.8.4 (released May 8, 2018, 1 day before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2018-8145](https://cve.now/CVE-2018-8145): An information disclosure vulnerability exists when Chakra improperly discloses the contents of its memory, which could provide an… - Severity: Unrated - Published: May 9, 2018 - Affected: fixed in 1.8.4. - Fixed in 1.8.4 (released May 8, 2018, 1 day before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2018-8139](https://cve.now/CVE-2018-8139): A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka… - Severity: Unrated - Published: May 9, 2018 - Affected: fixed in 1.8.4. - Fixed in 1.8.4 (released May 8, 2018, 1 day before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2018-8137](https://cve.now/CVE-2018-8137): A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka… - Severity: Unrated - Published: May 9, 2018 - Affected: fixed in 1.8.4. - Fixed in 1.8.4 (released May 8, 2018, 1 day before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2018-8133](https://cve.now/CVE-2018-8133): A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka… - Severity: Unrated - Published: May 9, 2018 - Affected: fixed in 1.8.4. - Fixed in 1.8.4 (released May 8, 2018, 1 day before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2018-8130](https://cve.now/CVE-2018-8130): A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka… - Severity: Unrated - Published: May 9, 2018 - Affected: fixed in 1.8.4. - Fixed in 1.8.4 (released May 8, 2018, 1 day before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2018-1022](https://cve.now/CVE-2018-1022): A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka… - Severity: Unrated - Published: May 9, 2018 - Affected: fixed in 1.8.4. - Fixed in 1.8.4 (released May 8, 2018, 1 day before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2018-0954](https://cve.now/CVE-2018-0954): A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka… - Severity: Unrated - Published: May 9, 2018 - Affected: fixed in 1.8.4. - Fixed in 1.8.4 (released May 8, 2018, 1 day before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2018-0946](https://cve.now/CVE-2018-0946): A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka… - Severity: Unrated - Published: May 9, 2018 - Affected: fixed in 1.8.4. - Fixed in 1.8.4 (released May 8, 2018, 1 day before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2018-0945](https://cve.now/CVE-2018-0945): A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka… - Severity: Unrated - Published: May 9, 2018 - Affected: fixed in 1.8.4. - Fixed in 1.8.4 (released May 8, 2018, 1 day before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2018-0943](https://cve.now/CVE-2018-0943): A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka… - Severity: Unrated - Published: May 9, 2018 - Affected: fixed in 1.8.4. - Fixed in 1.8.4 (released May 8, 2018, 1 day before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2018-1019](https://cve.now/CVE-2018-1019): A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka… - Severity: Unrated - Published: Apr 12, 2018 - Affected: fixed in 1.8.3. - Fixed in 1.8.3 (released Apr 11, 2018, 1 day before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2018-0995](https://cve.now/CVE-2018-0995): A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka… - Severity: Unrated - Published: Apr 12, 2018 - Affected: fixed in 1.8.3. - Fixed in 1.8.3 (released Apr 11, 2018, 1 day before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2018-0994](https://cve.now/CVE-2018-0994): A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka… - Severity: Unrated - Published: Apr 12, 2018 - Affected: fixed in 1.8.3. - Fixed in 1.8.3 (released Apr 11, 2018, 1 day before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2018-0993](https://cve.now/CVE-2018-0993): A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka… - Severity: Unrated - Published: Apr 12, 2018 - Affected: fixed in 1.8.3. - Fixed in 1.8.3 (released Apr 11, 2018, 1 day before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2018-0990](https://cve.now/CVE-2018-0990): A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka… - Severity: Unrated - Published: Apr 12, 2018 - Affected: fixed in 1.8.3. - Fixed in 1.8.3 (released Apr 11, 2018, 1 day before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2018-0980](https://cve.now/CVE-2018-0980): A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka… - Severity: Unrated - Published: Apr 12, 2018 - Affected: fixed in 1.8.3. - Fixed in 1.8.3 (released Apr 11, 2018, 1 day before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2018-0979](https://cve.now/CVE-2018-0979): A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka… - Severity: Unrated - Published: Apr 12, 2018 - Affected: fixed in 1.8.3. - Fixed in 1.8.3 (released Apr 11, 2018, 1 day before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2018-0939](https://cve.now/CVE-2018-0939): ChakraCore and Microsoft Edge in Windows 10 1703 and 1709 allow information disclosure, due to how the scripting engine handles objects in… - Severity: Unrated - Published: Mar 14, 2018 - Affected: fixed in 1.8.2. - Fixed in 1.8.2 (released Mar 13, 2018, 1 day before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2018-0937](https://cve.now/CVE-2018-0937): ChakraCore and Microsoft Windows 10 1703 and 1709 allow remote code execution, due to how the Chakra scripting engine handles objects in… - Severity: Unrated - Published: Mar 14, 2018 - Affected: fixed in 1.8.2. - Fixed in 1.8.2 (released Mar 13, 2018, 1 day before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2018-0936](https://cve.now/CVE-2018-0936): ChakraCore and Microsoft Windows 10 1709 allow remote code execution, due to how the Chakra scripting engine handles objects in memory… - Severity: Unrated - Published: Mar 14, 2018 - Affected: fixed in 1.8.2. - Fixed in 1.8.2 (released Mar 13, 2018, 1 day before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2018-0934](https://cve.now/CVE-2018-0934): ChakraCore and Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the… - Severity: Unrated - Published: Mar 14, 2018 - Affected: fixed in 1.8.2. - Fixed in 1.8.2 (released Mar 13, 2018, 1 day before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2018-0933](https://cve.now/CVE-2018-0933): ChakraCore and Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the… - Severity: Unrated - Published: Mar 14, 2018 - Affected: fixed in 1.8.2. - Fixed in 1.8.2 (released Mar 13, 2018, 1 day before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2018-0931](https://cve.now/CVE-2018-0931): ChakraCore and Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the… - Severity: Unrated - Published: Mar 14, 2018 - Affected: fixed in 1.8.2. - Fixed in 1.8.2 (released Mar 13, 2018, 1 day before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2018-0930](https://cve.now/CVE-2018-0930): ChakraCore and Microsoft Edge in Microsoft Windows 10 1709 allows remote code execution, due to how the Chakra scripting engine handles… - Severity: Unrated - Published: Mar 14, 2018 - Affected: fixed in 1.8.2. - Fixed in 1.8.2 (released Mar 13, 2018, 1 day before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2018-0925](https://cve.now/CVE-2018-0925): ChakraCore allows remote code execution, due to how the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine… - Severity: Unrated - Published: Mar 14, 2018 - Affected: fixed in 1.8.2. - Fixed in 1.8.2 (released Mar 13, 2018, 1 day before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2018-0874](https://cve.now/CVE-2018-0874): ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution… - Severity: Unrated - Published: Mar 14, 2018 - Affected: fixed in 1.8.2. - Fixed in 1.8.2 (released Mar 13, 2018, 1 day before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2018-0873](https://cve.now/CVE-2018-0873): ChakraCore and Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to… - Severity: Unrated - Published: Mar 14, 2018 - Affected: fixed in 1.8.2. - Fixed in 1.8.2 (released Mar 13, 2018, 1 day before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2018-0872](https://cve.now/CVE-2018-0872): ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution… - Severity: Unrated - Published: Mar 14, 2018 - Affected: fixed in 1.8.2. - Fixed in 1.8.2 (released Mar 13, 2018, 1 day before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2018-0860](https://cve.now/CVE-2018-0860): Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution… - Severity: Unrated - Published: Feb 15, 2018 - Affected: fixed in 1.8.1. - Fixed in 1.8.1 (released Feb 13, 2018, 2 days before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2018-0859](https://cve.now/CVE-2018-0859): Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution… - Severity: Unrated - Published: Feb 15, 2018 - Affected: fixed in 1.8.1. - Fixed in 1.8.1 (released Feb 13, 2018, 2 days before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2018-0858](https://cve.now/CVE-2018-0858): ChakraCore allows remote code execution, due to how the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine… - Severity: Unrated - Published: Feb 15, 2018 - Affected: fixed in 1.8.1. - Fixed in 1.8.1 (released Feb 13, 2018, 2 days before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2018-0857](https://cve.now/CVE-2018-0857): Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution… - Severity: Unrated - Published: Feb 15, 2018 - Affected: fixed in 1.8.1. - Fixed in 1.8.1 (released Feb 13, 2018, 2 days before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2018-0856](https://cve.now/CVE-2018-0856): Microsoft Edge and ChakraCore in Microsoft Windows 10 1703 and 1709 allows remote code execution, due to how the scripting engine handles… - Severity: Unrated - Published: Feb 15, 2018 - Affected: fixed in 1.8.1. - Fixed in 1.8.1 (released Feb 13, 2018, 2 days before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2018-0838](https://cve.now/CVE-2018-0838): Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution… - Severity: Unrated - Published: Feb 15, 2018 - Affected: fixed in 1.8.1. - Fixed in 1.8.1 (released Feb 13, 2018, 2 days before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2018-0837](https://cve.now/CVE-2018-0837): Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution… - Severity: Unrated - Published: Feb 15, 2018 - Affected: fixed in 1.8.1. - Fixed in 1.8.1 (released Feb 13, 2018, 2 days before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2018-0836](https://cve.now/CVE-2018-0836): Microsoft Edge and ChakraCore in Microsoft Windows 10 1703 and 1709 allows remote code execution, due to how the scripting engine handles… - Severity: Unrated - Published: Feb 15, 2018 - Affected: fixed in 1.8.1. - Fixed in 1.8.1 (released Feb 13, 2018, 2 days before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2018-0835](https://cve.now/CVE-2018-0835): Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution… - Severity: Unrated - Published: Feb 15, 2018 - Affected: fixed in 1.8.1. - Fixed in 1.8.1 (released Feb 13, 2018, 2 days before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2018-0834](https://cve.now/CVE-2018-0834): Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution… - Severity: Unrated - Published: Feb 15, 2018 - Affected: fixed in 1.8.1. - Fixed in 1.8.1 (released Feb 13, 2018, 2 days before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2018-0818](https://cve.now/CVE-2018-0818): Microsoft ChakraCore allows an attacker to bypass Control Flow Guard (CFG) in conjunction with another vulnerability to run arbitrary code… - Severity: Unrated - Published: Jan 10, 2018 - Affected: fixed in 1.8.0. - Fixed in 1.8.0 (released Jan 17, 2018, 7 days after disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2017-11916](https://cve.now/CVE-2017-11916): ChakraCore allows an attacker to execute arbitrary code in the context of the current user, due to how the ChakraCore scripting engine… - Severity: Unrated - Published: Dec 12, 2017 - Affected: fixed in 1.7.5. - Fixed in 1.7.5 (released Dec 12, 2017, the day of disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2017-11914](https://cve.now/CVE-2017-11914): ChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to gain the same user… - Severity: Unrated - Published: Dec 12, 2017 - Affected: fixed in 1.7.5. - Fixed in 1.7.5 (released Dec 12, 2017, the day of disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2017-11911](https://cve.now/CVE-2017-11911): ChakraCore and Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of… - Severity: Unrated - Published: Dec 12, 2017 - Affected: fixed in 1.7.5. - Fixed in 1.7.5 (released Dec 12, 2017, the day of disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2017-11910](https://cve.now/CVE-2017-11910): ChakraCore and Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the… - Severity: Unrated - Published: Dec 12, 2017 - Affected: fixed in 1.7.5. - Fixed in 1.7.5 (released Dec 12, 2017, the day of disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2017-11909](https://cve.now/CVE-2017-11909): ChakraCore and Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of… - Severity: Unrated - Published: Dec 12, 2017 - Affected: fixed in 1.7.5. - Fixed in 1.7.5 (released Dec 12, 2017, the day of disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2017-11908](https://cve.now/CVE-2017-11908): ChakraCore and Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting… - Severity: Unrated - Published: Dec 12, 2017 - Affected: fixed in 1.7.5. - Fixed in 1.7.5 (released Dec 12, 2017, the day of disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2017-11905](https://cve.now/CVE-2017-11905): ChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code… - Severity: Unrated - Published: Dec 12, 2017 - Affected: fixed in 1.7.5. - Fixed in 1.7.5 (released Dec 12, 2017, the day of disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2017-11893](https://cve.now/CVE-2017-11893): ChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code… - Severity: Unrated - Published: Dec 12, 2017 - Affected: fixed in 1.7.5. - Fixed in 1.7.5 (released Dec 12, 2017, the day of disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2017-11889](https://cve.now/CVE-2017-11889): ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary… - Severity: Unrated - Published: Dec 12, 2017 - Affected: fixed in 1.7.5. - Fixed in 1.7.5 (released Dec 12, 2017, the day of disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2017-11871](https://cve.now/CVE-2017-11871): ChakraCore and Microsoft Edge in Windows 10 1703, 1709, and Windows Server, version 1709 allows an attacker to gain the same user rights… - Severity: Unrated - Published: Nov 15, 2017 - Affected: fixed in 1.7.4. - Fixed in 1.7.4 (released Nov 16, 2017, 1 day after disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2017-11870](https://cve.now/CVE-2017-11870): ChakraCore and Microsoft Edge in Windows 10 1703, 1709, and Windows Server, version 1709 allows an attacker to gain the same user rights… - Severity: Unrated - Published: Nov 15, 2017 - Affected: fixed in 1.7.4. - Fixed in 1.7.4 (released Nov 16, 2017, 1 day after disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2017-11862](https://cve.now/CVE-2017-11862): ChakraCore and Microsoft Edge in Windows 10 1709 and Windows Server, version 1709 allows an attacker to gain the same user rights as the… - Severity: Unrated - Published: Nov 15, 2017 - Affected: fixed in 1.7.4. - Fixed in 1.7.4 (released Nov 16, 2017, 1 day after disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2017-11767](https://cve.now/CVE-2017-11767): ChakraCore allows an attacker to gain the same user rights as the current user, due to the way that the ChakraCore scripting engine… - Severity: Unrated - Published: Nov 2, 2017 - Affected: fixed in 1.6.2. - Fixed in 1.6.2 (released Sep 14, 2017, 49 days before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2017-11821](https://cve.now/CVE-2017-11821): ChakraCore and Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current… - Severity: Unrated - Published: Oct 13, 2017 - Affected: fixed in 1.7.3. - Fixed in 1.7.3 (released Oct 11, 2017, 2 days before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2017-11807](https://cve.now/CVE-2017-11807): ChakraCore and Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current… - Severity: Unrated - Published: Oct 13, 2017 - Affected: fixed in 1.7.3. - Fixed in 1.7.3 (released Oct 11, 2017, 2 days before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2017-11806](https://cve.now/CVE-2017-11806): ChakraCore and Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current… - Severity: Unrated - Published: Oct 13, 2017 - Affected: fixed in 1.7.3. - Fixed in 1.7.3 (released Oct 11, 2017, 2 days before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2017-11805](https://cve.now/CVE-2017-11805): ChakraCore and Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current… - Severity: Unrated - Published: Oct 13, 2017 - Affected: fixed in 1.7.3. - Fixed in 1.7.3 (released Oct 11, 2017, 2 days before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2017-11801](https://cve.now/CVE-2017-11801): ChakraCore allows an attacker to execute arbitrary code in the context of the current user, due to how the ChakraCore scripting engine… - Severity: Unrated - Published: Oct 13, 2017 - Affected: fixed in 1.7.3. - Fixed in 1.7.3 (released Oct 11, 2017, 2 days before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2017-11797](https://cve.now/CVE-2017-11797): ChakraCore allows an attacker to execute arbitrary code in the context of the current user, due to how the ChakraCore scripting engine… - Severity: Unrated - Published: Oct 13, 2017 - Affected: fixed in 1.7.3. - Fixed in 1.7.3 (released Oct 11, 2017, 2 days before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2017-11796](https://cve.now/CVE-2017-11796): ChakraCore and Microsoft Edge in Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user, due to… - Severity: Unrated - Published: Oct 13, 2017 - Affected: fixed in 1.7.3. - Fixed in 1.7.3 (released Oct 11, 2017, 2 days before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2017-11792](https://cve.now/CVE-2017-11792): ChakraCore and Microsoft Edge in Microsoft Windows 10 1703 allow an attacker to execute arbitrary code in the context of the current user… - Severity: Unrated - Published: Oct 13, 2017 - Affected: fixed in 1.7.3. - Fixed in 1.7.3 (released Oct 11, 2017, 2 days before disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2017-8658](https://cve.now/CVE-2017-8658): A remote code execution vulnerability exists in the way that the Chakra JavaScript engine renders when handling objects in memory, aka… - Severity: Unrated - Published: Aug 11, 2017 - Affected: fixed in 1.6.1. - Fixed in 1.6.2 (released Sep 14, 2017, 34 days after disclosure, the advisory names 1.6.1, which was never published). - The latest release, 1.11.24, is not affected. ### [CVE-2017-8659](https://cve.now/CVE-2017-8659): Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to obtain information to further compromise the user's system due to the… - Severity: Unrated - Published: Aug 8, 2017 - Affected: fixed in 1.6.1. - Fixed in 1.6.2 (released Sep 14, 2017, 37 days after disclosure, the advisory names 1.6.1, which was never published). - The latest release, 1.11.24, is not affected. ### [CVE-2017-0252](https://cve.now/CVE-2017-0252): A remote code execution vulnerability exists in Microsoft Chakra Core in the way JavaScript engines render when handling objects in memory. - Severity: Unrated - Published: May 15, 2017 - Affected: fixed in 1.4.4. - Fixed in 1.4.4 (released May 23, 2017, 8 days after disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2017-0223](https://cve.now/CVE-2017-0223): A remote code execution vulnerability exists in Microsoft Chakra Core in the way JavaScript engines render when handling objects in memory. - Severity: Unrated - Published: May 15, 2017 - Affected: fixed in 1.4.4. - Fixed in 1.4.4 (released May 23, 2017, 8 days after disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2017-0236](https://cve.now/CVE-2017-0236): A remote code execution vulnerability exists in Microsoft Edge in the way that the Chakra JavaScript engine renders when handling objects… - Severity: Unrated - Published: May 12, 2017 - Affected: fixed in 1.4.4. - Fixed in 1.4.4 (released May 23, 2017, 11 days after disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2017-0235](https://cve.now/CVE-2017-0235): A remote code execution vulnerability exists in Microsoft Edge in the way that the Chakra JavaScript engine renders when handling objects… - Severity: Unrated - Published: May 12, 2017 - Affected: fixed in 1.4.4. - Fixed in 1.4.4 (released May 23, 2017, 11 days after disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2017-0234](https://cve.now/CVE-2017-0234): A remote code execution vulnerability exists in Microsoft Edge in the way that the Chakra JavaScript engine renders when handling objects… - Severity: Unrated - Published: May 12, 2017 - Affected: fixed in 1.4.4. - Fixed in 1.4.4 (released May 23, 2017, 11 days after disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2017-0224](https://cve.now/CVE-2017-0224): A remote code execution vulnerability exists in the way JavaScript engines render when handling objects in memory in Microsoft Edge, aka… - Severity: Unrated - Published: May 12, 2017 - Affected: fixed in 1.4.4. - Fixed in 1.4.4 (released May 23, 2017, 11 days after disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2017-0208](https://cve.now/CVE-2017-0208): An information disclosure vulnerability exists in Microsoft Edge when the Chakra scripting engine does not properly handle objects in… - Severity: Unrated - Published: Apr 12, 2017 - Affected: fixed in 1.4.3. - Fixed in 1.4.3 (released Apr 27, 2017, 15 days after disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2016-7243](https://cve.now/CVE-2016-7243): The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service… - Severity: Unrated - Published: Nov 10, 2016 - Affected: fixed in 1.2.2. - Fixed in 1.2.2 (released Nov 21, 2016, 11 days after disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2016-7242](https://cve.now/CVE-2016-7242): The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service… - Severity: Unrated - Published: Nov 10, 2016 - Affected: fixed in 1.2.2. - Fixed in 1.2.2 (released Nov 21, 2016, 11 days after disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2016-7240](https://cve.now/CVE-2016-7240): The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service… - Severity: Unrated - Published: Nov 10, 2016 - Affected: fixed in 1.2.2. - Fixed in 1.2.2 (released Nov 21, 2016, 11 days after disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2016-7208](https://cve.now/CVE-2016-7208): The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service… - Severity: Unrated - Published: Nov 10, 2016 - Affected: fixed in 1.2.2. - Fixed in 1.2.2 (released Nov 21, 2016, 11 days after disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2016-7203](https://cve.now/CVE-2016-7203): The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service… - Severity: Unrated - Published: Nov 10, 2016 - Affected: fixed in 1.2.2. - Fixed in 1.2.2 (released Nov 21, 2016, 11 days after disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2016-7202](https://cve.now/CVE-2016-7202): The scripting engines in Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or… - Severity: Unrated - Published: Nov 10, 2016 - Affected: fixed in 1.2.2. - Fixed in 1.2.2 (released Nov 21, 2016, 11 days after disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2016-7201](https://cve.now/CVE-2016-7201): The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (mem - Severity: High 8.8 · KEV - Published: Nov 10, 2016 - Affected: fixed in 1.2.2. - Fixed in 1.2.2 (released Nov 21, 2016, 11 days after disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2016-7200](https://cve.now/CVE-2016-7200): The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (mem - Severity: High 8.8 · KEV - Published: Nov 10, 2016 - Affected: fixed in 1.2.2. - Fixed in 1.2.2 (released Nov 21, 2016, 11 days after disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2016-7194](https://cve.now/CVE-2016-7194): The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory… - Severity: Unrated - Published: Oct 14, 2016 - Affected: through 1.2.1. - Fixed in 1.2.2 (released Nov 21, 2016, 38 days after disclosure), the first release outside every affected range (no listed fixed version clears them all). - The latest release, 1.11.24, is not affected. ### [CVE-2016-7190](https://cve.now/CVE-2016-7190): The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory… - Severity: Unrated - Published: Oct 14, 2016 - Affected: through 1.2.1. - Fixed in 1.2.2 (released Nov 21, 2016, 38 days after disclosure), the first release outside every affected range (no listed fixed version clears them all). - The latest release, 1.11.24, is not affected. ### [CVE-2016-7189](https://cve.now/CVE-2016-7189): The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code via a crafted web site, aka "Scripting… - Severity: Unrated - Published: Oct 14, 2016 - Affected: fixed in 1.2.1. - Fixed in 1.2.1 (released Oct 22, 2016, 8 days after disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2016-3390](https://cve.now/CVE-2016-3390): The scripting engines in Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a… - Severity: Unrated - Published: Oct 14, 2016 - Affected: fixed in 1.2.1. - Fixed in 1.2.1 (released Oct 22, 2016, 8 days after disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2016-3389](https://cve.now/CVE-2016-3389): The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory… - Severity: Unrated - Published: Oct 14, 2016 - Affected: fixed in 1.2.1. - Fixed in 1.2.1 (released Oct 22, 2016, 8 days after disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2016-3386](https://cve.now/CVE-2016-3386): The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory… - Severity: Unrated - Published: Oct 14, 2016 - Affected: fixed in 1.2.1. - Fixed in 1.2.1 (released Oct 22, 2016, 8 days after disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2016-3382](https://cve.now/CVE-2016-3382): The scripting engines in Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or… - Severity: Unrated - Published: Oct 14, 2016 - Affected: fixed in 1.2.1. - Fixed in 1.2.1 (released Oct 22, 2016, 8 days after disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2016-3377](https://cve.now/CVE-2016-3377): The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory… - Severity: Unrated - Published: Sep 14, 2016 - Affected: fixed in 1.2.1. - Fixed in 1.2.1 (released Oct 22, 2016, 38 days after disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2016-3350](https://cve.now/CVE-2016-3350): The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory… - Severity: Unrated - Published: Sep 14, 2016 - Affected: fixed in 1.2.1. - Fixed in 1.2.1 (released Oct 22, 2016, 38 days after disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2016-3296](https://cve.now/CVE-2016-3296): The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code via a crafted web site, aka "Scripting… - Severity: Unrated - Published: Aug 9, 2016 - Affected: through 1.2.0. - Fixed in 1.2.1 (released Oct 22, 2016, 74 days after disclosure), the first release outside every affected range (no listed fixed version clears them all). - The latest release, 1.11.24, is not affected. ### [CVE-2016-3269](https://cve.now/CVE-2016-3269): The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory… - Severity: Unrated - Published: Jul 13, 2016 - Affected: fixed in 1.2.0.0. - Fixed in 1.2.0 (released Aug 24, 2016, 42 days after disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2016-3265](https://cve.now/CVE-2016-3265): The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory… - Severity: Unrated - Published: Jul 13, 2016 - Affected: fixed in 1.2.0.0. - Fixed in 1.2.0 (released Aug 24, 2016, 42 days after disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2016-3260](https://cve.now/CVE-2016-3260): The Microsoft (1) JScript 9, (2) VBScript, and (3) Chakra JavaScript engines, as used in Microsoft Internet Explorer 11, Microsoft Edge… - Severity: Unrated - Published: Jul 13, 2016 - Affected: fixed in 1.2.0.0. - Fixed in 1.2.0 (released Aug 24, 2016, 42 days after disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2016-3259](https://cve.now/CVE-2016-3259): The Microsoft (1) JScript 9, (2) VBScript, and (3) Chakra JavaScript engines, as used in Microsoft Internet Explorer 9 through 11… - Severity: Unrated - Published: Jul 13, 2016 - Affected: fixed in 1.2.0.0. - Fixed in 1.2.0 (released Aug 24, 2016, 42 days after disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2016-3248](https://cve.now/CVE-2016-3248): The Microsoft (1) JScript 9, (2) VBScript, and (3) Chakra JavaScript engines, as used in Microsoft Internet Explorer 9 through 11… - Severity: Unrated - Published: Jul 13, 2016 - Affected: through 1.2.0. - Fixed in 1.2.1 (released Oct 22, 2016, 101 days after disclosure), the first release outside every affected range (no listed fixed version clears them all). - The latest release, 1.11.24, is not affected. ### [CVE-2016-3214](https://cve.now/CVE-2016-3214): The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory… - Severity: Unrated - Published: Jun 16, 2016 - Affected: fixed in 1.3.0. - Fixed in 1.3.0 (released Oct 28, 2016, 134 days after disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2016-3202](https://cve.now/CVE-2016-3202): The Microsoft (1) Chakra JavaScript, (2) JScript, and (3) VBScript engines, as used in Microsoft Internet Explorer 10 and 11 and Microsoft… - Severity: Unrated - Published: Jun 16, 2016 - Affected: fixed in 1.2.0.0. - Fixed in 1.2.0 (released Aug 24, 2016, 69 days after disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2016-3199](https://cve.now/CVE-2016-3199): The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory… - Severity: Unrated - Published: Jun 16, 2016 - Affected: fixed in 1.2.0.0. - Fixed in 1.2.0 (released Aug 24, 2016, 69 days after disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2016-0193](https://cve.now/CVE-2016-0193): The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory… - Severity: Unrated - Published: May 11, 2016 - Affected: fixed in 1.2.0.0. - Fixed in 1.2.0 (released Aug 24, 2016, 105 days after disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2016-0191](https://cve.now/CVE-2016-0191): The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory… - Severity: Unrated - Published: May 11, 2016 - Affected: fixed in 1.2.0.0. - Fixed in 1.2.0 (released Aug 24, 2016, 105 days after disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2016-0186](https://cve.now/CVE-2016-0186): The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory… - Severity: Unrated - Published: May 11, 2016 - Affected: fixed in 1.2.0.0. - Fixed in 1.2.0 (released Aug 24, 2016, 105 days after disclosure). - The latest release, 1.11.24, is not affected. ### [CVE-2016-0024](https://cve.now/CVE-2016-0024): The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code via unspecified vectors, aka "Scripting… - Severity: Unrated - Published: Jan 13, 2016 - Affected: fixed in 1.2.0. - Fixed in 1.2.0 (released Aug 24, 2016, 224 days after disclosure). - The latest release, 1.11.24, is not affected. --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/packages/nuget/microsoft.chakracore Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.