Microsoft Chakracore vulnerabilities
206 known vulnerabilities affecting microsoft/chakracore.
Total CVEs
206
CISA KEV
3
actively exploited
Public exploits
34
Exploited in wild
5
Severity breakdown
CRITICAL2HIGH179MEDIUM25
Vulnerabilities
Page 9 of 11
CVE-2018-0778HIGHCVSS 7.5fixed in 1.7.62018-01-04
CVE-2018-0778 [HIGH] CVE-2018-0778: Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the
Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0758, CVE-2018-0762, CVE-2018-0768, CVE-2018-0769, CVE-2018-0770, CVE-2018-0772, CVE-2018-0773, C
nvd
CVE-2018-0758HIGHCVSS 7.5PoCfixed in 1.7.62018-01-04
CVE-2018-0758 [HIGH] CWE-787 CVE-2018-0758: Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacke
Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0762, CVE-2018-0768, CVE-2018-0769, CVE-
nvd
CVE-2018-0769HIGHCVSS 7.5PoCfixed in 1.7.62018-01-04
CVE-2018-0769 [HIGH] CVE-2018-0769: Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacke
Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0758, CVE-2018-0762, CVE-2018-0768, CVE-2018-077
nvd
CVE-2018-0762HIGHCVSS 7.5fixed in 1.7.62018-01-04
CVE-2018-0762 [HIGH] CVE-2018-0762: Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Window
Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Internet Explorer and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine han
nvd
CVE-2018-0781HIGHCVSS 7.5fixed in 1.7.62018-01-04
CVE-2018-0781 [HIGH] CVE-2018-0781: Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacke
Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0758, CVE-2018-0762, CVE-2018-0768, CVE-2018-076
nvd
CVE-2018-0775HIGHCVSS 7.5PoCfixed in 1.7.62018-01-04
CVE-2018-0775 [HIGH] CVE-2018-0775: Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the
Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0758, CVE-2018-0762, CVE-2018-0768, CVE-2018-0769, CVE-2018-0770, CVE-2018-0772, CVE-2018-0773, C
nvd
CVE-2018-0777HIGHCVSS 7.5PoCfixed in 1.7.62018-01-04
CVE-2018-0777 [HIGH] CVE-2018-0777: Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacke
Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0758, CVE-2018-0762, CVE-2018-0768, CVE-2018-076
nvd
CVE-2018-0776HIGHCVSS 7.5PoCfixed in 1.7.62018-01-04
CVE-2018-0776 [HIGH] CVE-2018-0776: Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacke
Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0758, CVE-2018-0762, CVE-2018-0768, CVE-2018-076
nvd
CVE-2018-0768HIGHCVSS 7.5fixed in 1.7.62018-01-04
CVE-2018-0768 [HIGH] CVE-2018-0768: Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the
Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0758, CVE-2018-0762, CVE-2018-0769, CVE-2018-0770, CVE-2018-0772, CVE-2018-0773, CVE-2018-0774, C
nvd
CVE-2018-0770HIGHCVSS 7.5PoCfixed in 1.7.62018-01-04
CVE-2018-0770 [HIGH] CVE-2018-0770: Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacke
Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0758, CVE-2018-0762, CVE-2018-0768, CVE-2018-076
nvd
CVE-2018-0773HIGHCVSS 7.5fixed in 1.7.62018-01-04
CVE-2018-0773 [HIGH] CVE-2018-0773: Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the
Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0758, CVE-2018-0762, CVE-2018-0768, CVE-2018-0769, CVE-2018-0770, CVE-2018-0772, CVE-2018-0774, C
nvd
CVE-2018-0774HIGHCVSS 7.5PoCfixed in 1.7.62018-01-04
CVE-2018-0774 [HIGH] CVE-2018-0774: Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the
Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0758, CVE-2018-0762, CVE-2018-0768, CVE-2018-0769, CVE-2018-0770, CVE-2018-0772, CVE-2018-0773, C
nvd
CVE-2018-0772HIGHCVSS 7.5fixed in 1.7.62018-01-04
CVE-2018-0772 [HIGH] CVE-2018-0772: Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Window
Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Internet Explorer and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine han
nvd
CVE-2018-0800MEDIUMCVSS 5.3≤ 1.7.62018-01-04
CVE-2018-0800 [MEDIUM] CVE-2018-0800: Microsoft Edge in Microsoft Windows 10 1709 allows an attacker to obtain information to further comp
Microsoft Edge in Microsoft Windows 10 1709 allows an attacker to obtain information to further compromise the user's system, due to how the scripting engine handles objects in memory, aka "Scripting Engine Information Disclosure Vulnerability". This CVE ID is unique from CVE-2018-0767 and CVE-2018-0780.
nvd
CVE-2018-0780MEDIUMCVSS 5.3PoCfixed in 1.7.62018-01-04
CVE-2018-0780 [MEDIUM] CVE-2018-0780: Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows
Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to obtain information to further compromise the user's system, due to how the scripting engine handles objects in memory, aka "Scripting Engine Information Disclosure Vulnerability". This CVE ID is unique from CVE-2018-0767 and CVE-2018-0800.
nvd
CVE-2018-0767MEDIUMCVSS 5.3PoCfixed in 1.7.62018-01-04
CVE-2018-0767 [MEDIUM] CWE-125 CVE-2018-0767: Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an att
Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to obtain information to further compromise the user's system, due to how the scripting engine handles objects in memory, aka "Scripting Engine Information Disclosure Vulnerability". This CVE ID is unique from CVE-2018-0780 and CVE-2018-0800.
nvd
CVE-2017-11889HIGHCVSS 7.5fixed in 1.7.52017-12-12
CVE-2017-11889 [HIGH] CVE-2017-11889: ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 al
ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11886, CVE-2017-11890, CVE-2017
nvd
CVE-2017-11905HIGHCVSS 7.5fixed in 1.7.52017-12-12
CVE-2017-11905 [HIGH] CVE-2017-11905: ChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows a
ChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11886, CVE-2017-11889, CVE-2017-11890
nvd
CVE-2017-11918HIGHCVSS 7.5PoCfixed in 1.7.52017-12-12
CVE-2017-11918 [HIGH] CVE-2017-11918: ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 al
ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11886, CVE-2017-11889, CVE-2017-11890, CVE-
nvd
CVE-2017-11911HIGHCVSS 7.5PoCfixed in 1.7.52017-12-12
CVE-2017-11911 [HIGH] CVE-2017-11911: ChakraCore and Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to exec
ChakraCore and Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11886, CVE-2017-11889, CVE-2017-11890, CVE-2017-11893,
nvd