ChakraCore RCE Vulnerability

HIGH 8.8CVE-2016-0024 · GHSA-g77f-7wm9-rh6p · Published 13/01/2016 · updated 17/06/2026

Package	Affected versions	Patched versions
Microsoft.ChakraCore NuGet	`< 1.2.0`	`1.2.0`

Description

The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code via unspecified vectors, aka "Scripting Engine Memory Corruption Vulnerability."

NVD description

The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code via unspecified vectors, aka "Scripting Engine Memory Corruption Vulnerability."

References

nvd.nist.gov/vuln/detail/CVE-2016-0024 · ADVISORY
docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-002 · WEB
chakra-core/ChakraCore · PACKAGE
web.archive.org/web/20210508011246/http://www.securityfocus.com/bid/79891 · WEB
web.archive.org/web/20211024030653/http://www.securitytracker.com/id/1034649 · WEB
securityfocus.com/bid/79891
securitytracker.com/id/1034649

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free