Known Vulnerabilities for Chakracore by Microsoft
Listed below are 10 of the newest known vulnerabilities associated with "Chakracore" by "Microsoft".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2023-37143 json | ChakraCore branch master cbb9b was discovered to contain a segmentation violation via the function BackwardPass::IsEmptyLoopA... | 5.5 - MEDIUM | 2023-07-18 | 2023-07-27 |
| CVE-2023-37142 json | ChakraCore branch master cbb9b was discovered to contain a segmentation violation via the function Js::EntryPointInfo::HasInl... | 5.5 - MEDIUM | 2023-07-18 | 2023-07-27 |
| CVE-2023-37141 json | ChakraCore branch master cbb9b was discovered to contain a segmentation violation via the function Js::ProfilingHelpers::Prof... | 5.5 - MEDIUM | 2023-07-18 | 2023-07-27 |
| CVE-2023-37140 json | ChakraCore branch master cbb9b was discovered to contain a segmentation violation via the function Js::DiagScopeVariablesWalk... | 5.5 - MEDIUM | 2023-07-18 | 2023-07-27 |
| CVE-2023-37139 json | ChakraCore branch master cbb9b was discovered to contain a stack overflow vulnerability via the function Js::ScopeSlots::IsDe... | 5.5 - MEDIUM | 2023-07-18 | 2023-07-27 |
| CVE-2020-23315 json | There is an ASSERTION (pFuncBody->GetYieldRegister() == oldYieldRegister) failed in Js::DebugContext::RundownSourcesAndRepars... | 7.5 - HIGH | 2022-01-20 | 2022-01-27 |
| CVE-2020-17131 json | Chakra Scripting Engine Memory Corruption Vulnerability | 4.2 - MEDIUM | 2020-12-10 | 2023-12-31 |
| CVE-2020-17054 json | Chakra Scripting Engine Memory Corruption Vulnerability This CVE ID is unique from CVE-2020-17048. | 4.2 - MEDIUM | 2020-11-11 | 2023-12-31 |
| CVE-2020-17048 json | Chakra Scripting Engine Memory Corruption Vulnerability This CVE ID is unique from CVE-2020-17054. | 4.2 - MEDIUM | 2020-11-11 | 2023-12-31 |
| CVE-2020-1555 json | A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge... | 8.8 - HIGH | 2020-08-17 | 2024-01-19 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Microsoft | Chakracore | 1.8.5 | |||
| Application | Microsoft | Chakracore | 1.8.4 | |||
| Application | Microsoft | Chakracore | 1.8.3 | |||
| Application | Microsoft | Chakracore | 1.8.2 | |||
| Application | Microsoft | Chakracore | 1.8.1 | |||
| Application | Microsoft | Chakracore | 1.8.0 | |||
| Application | Microsoft | Chakracore | 1.7.6 | |||
| Application | Microsoft | Chakracore | 1.7.5 | |||
| Application | Microsoft | Chakracore | 1.7.4 | |||
| Application | Microsoft | Chakracore | 1.7.3 | |||
| Application | Microsoft | Chakracore | 1.7.2 | |||
| Application | Microsoft | Chakracore | 1.7.1 | |||
| Application | Microsoft | Chakracore | 1.7.0 | |||
| Application | Microsoft | Chakracore | 1.6.2 | |||
| Application | Microsoft | Chakracore | 1.6.1 | |||
| Application | Microsoft | Chakracore | 1.6.0 | |||
| Application | Microsoft | Chakracore | 1.5.3 | |||
| Application | Microsoft | Chakracore | 1.5.2 | |||
| Application | Microsoft | Chakracore | 1.5.1 | |||
| Application | Microsoft | Chakracore | 1.5.0 |