CVE-2017-0223

Critical

Published: 15/05/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

A remote code execution vulnerability exists in Microsoft Chakra Core related to the way JavaScript engines render when handling objects in memory. This is known as 'Scripting Engine Memory Corruption Vulnerability'.

Risk Assessment

This vulnerability could allow attackers to remotely execute arbitrary code on the victim's system, posing a significant security risk to the organization.

Recommendation

It is recommended to update Microsoft Chakra Core to the latest version to mitigate this vulnerability and to monitor systems for unauthorized activities.

Original NVD description (English source)

A remote code execution vulnerability exists in Microsoft Chakra Core in the way JavaScript engines render when handling objects in memory. aka "Scripting Engine Memory Corruption Vulnerability". This vulnerability is unique from CVE-2017-0252.