| Package | Affected versions | Patched versions |
|---|---|---|
| Microsoft.ChakraCore | < 1.8.0 | 1.8.0 |
Microsoft ChakraCore allows an attacker to bypass Control Flow Guard (CFG) in conjunction with another vulnerability to run arbitrary code on a target system, due to how the Chakra scripting engine handles accessing memory, aka "Scripting Engine Security Feature Bypass".
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free