Out-of-bounds Write in ChakraCore

MEDIO 4.2CVE-2020-17048 · GHSA-vpc2-7xmf-ppmf · Published 11/11/2020 · updated 17/06/2026

En resumen

CVE-2020-17048 es una vulnerabilidad MEDIO (CVSS 4.2) que afecta a Microsoft.ChakraCore.
Probabilidad de explotación en los próximos 30 días (EPSS): 1.6%, mayor que el 76.5% de las vulnerabilidades.
Solución: actualizar a 1.11.23 o posterior.

Package	Affected versions	Patched versions
Microsoft.ChakraCore NuGet	`< 1.11.23`	`1.11.23`

Chakra Scripting Engine Memory Corruption Vulnerability This CVE ID is unique from CVE-2020-17054.

NVD description

Chakra Scripting Engine Memory Corruption Vulnerability

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

NuGet

< 1.11.23

1.11.23

Más vulnerabilidades de Microsoft.ChakraCore

Ver todo →