Chakra JIT server Privilege Escalation

ALTO 8.1CVE-2019-0649 · GHSA-6c6r-39cv-x5fq · Published 05/03/2019 · updated 17/06/2026

En resumen

CVE-2019-0649 es una vulnerabilidad ALTO (CVSS 8.1) que afecta a Microsoft.ChakraCore, chakracore (microsoft).
Probabilidad de explotación en los próximos 30 días (EPSS): 4.3%, mayor que el 91.2% de las vulnerabilidades.
Solución: actualizar a 1.11.6 o posterior.

Package	Affected versions	Patched versions
Microsoft.ChakraCore NuGet	`< 1.11.6`	`1.11.6`
chakracore microsoft	`< 1.11.6`	`1.11.6`

A vulnerability exists in Microsoft Chakra JIT server, aka 'Scripting Engine Elevation of Privileges Vulnerability'.

NVD description

A vulnerability exists in Microsoft Chakra JIT server, aka 'Scripting Engine Elevation of Privileged Vulnerability'.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

NuGet

< 1.11.6

1.11.6

< 1.11.6

1.11.6

Más vulnerabilidades de Microsoft.ChakraCore

Ver todo →