ChakraCore Scripting Engine Type Confusion Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 03/03/2022. Patch affected systems as an emergency.
| Package | Affected versions | Patched versions |
|---|---|---|
| Microsoft.ChakraCore | < 1.10.1 | 1.10.1 |
| chakracore | < 1.10.1 | 1.10.1 |
A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore. This CVE ID is unique from CVE-2018-8242, CVE-2018-8283, CVE-2018-8287, CVE-2018-8288, CVE-2018-8291, CVE-2018-8296.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free