High severity vulnerability that affects Microsoft.ChakraCore

HIGH 7.5CVE-2019-0639 · GHSA-6jf5-rmhv-38cw · Published 08/04/2019 · updated 17/06/2026

Package	Affected versions	Patched versions
Microsoft.ChakraCore NuGet	`< 1.11.7`	`1.11.7`
internet explorer microsoft	`= 11`	No fix yet

Description

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0609, CVE-2019-0680, CVE-2019-0769, CVE-2019-0770, CVE-2019-0771, CVE-2019-0773, CVE-2019-0783.

NVD description

References

nvd.nist.gov/vuln/detail/CVE-2019-0639 · ADVISORY
GitHub Advisory GHSA-6jf5-rmhv-38cw · ADVISORY
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0639 · WEB
zerodayinitiative.com/advisories/ZDI-20-122 · WEB
zerodayinitiative.com/advisories/ZDI-20-122

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free