Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft_corporation:chakracore:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMicrosoft Corporation (fc66ce9b-351f-5bf8-b2d9-ed34143ae0dc)
ProductChakracore (52e270af-6c5b-5546-bc37-de2a15119917)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-0925 vulnerable 2026-06-08 05:10:25.097342 Details available
ChakraCore allows remote code execution, due to how the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0876, CVE-2018-0889, CVE-2018-0893, and CVE-2018-0935.
Published: 2018-03-14T17:00:00.000Z
Updated: 2024-09-16T20:11:50.778Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-0858 vulnerable 2026-06-08 05:10:24.950301 Details available
ChakraCore allows remote code execution, due to how the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0834, CVE-2018-0835, CVE-2018-0836, CVE-2018-0837, CVE-2018-0838, CVE-2018-0840, CVE-2018-0856, CVE-2018-0857, CVE-2018-0859, CVE-2018-0860, CVE-2018-0861, and CVE-2018-0866.
Published: 2018-02-15T02:00:00.000Z
Updated: 2024-09-16T23:26:47.900Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-0818 vulnerable 2026-06-08 05:10:24.856144 Details available
Microsoft ChakraCore allows an attacker to bypass Control Flow Guard (CFG) in conjunction with another vulnerability to run arbitrary code on a target system, due to how the Chakra scripting engine handles accessing memory, aka "Scripting Engine Security Feature Bypass".
Published: 2018-01-10T01:00:00.000Z
Updated: 2024-09-16T20:57:52.853Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-8658 vulnerable 2026-06-08 05:10:08.689930 Details available
A remote code execution vulnerability exists in the way that the Chakra JavaScript engine renders when handling objects in memory, aka "Scripting Engine Memory Corruption Vulnerability".
Published: 2017-08-11T01:00:00.000Z
Updated: 2024-09-17T02:27:48.755Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-11916 vulnerable 2026-06-08 05:08:38.625231 Details available
ChakraCore allows an attacker to execute arbitrary code in the context of the current user, due to how the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11886, CVE-2017-11889, CVE-2017-11890, CVE-2017-11893, CVE-2017-11894, CVE-2017-11895, CVE-2017-11901, CVE-2017-11903, CVE-2017-11905, CVE-2017-11905, CVE-2017-11907, CVE-2017-11908, CVE-2017-11909, CVE-2017-11910, CVE-2017-11911, CVE-2017-11912, CVE-2017-11913, CVE-2017-11914, CVE-2017-11918, and CVE-2017-11930.
Published: 2017-12-12T21:00:00.000Z
Updated: 2024-09-16T18:29:20.619Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-11801 vulnerable 2026-06-08 05:08:38.478092 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-11797 vulnerable 2026-06-08 05:08:38.476089 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-11767 vulnerable 2026-06-08 05:08:38.415319 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.