ChakraCore, Windows 10, Windows Server 2016 vulnerabilities
3 known CVE vulnerabilities in ChakraCore, Windows 10, Windows Server 2016, translated and rated.
- CVE-2017-11911High
ChakraCore and Windows 10 versions 1511, 1607, 1703, 1709, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, known as 'Scripting Engine Memory Corruption Vulnerability'.
- CVE-2017-11910High
ChakraCore and Windows 10 (Gold, 1511, 1607, 1703, 1709) and Windows Server 2016 have a vulnerability that allows an attacker to execute arbitrary code in the context of the current user due to improper handling of objects in memory by the scripting engine.
- CVE-2017-11909High
ChakraCore and Windows 10 (versions 1511, 1607, 1703, 1709) and Windows Server 2016 have a vulnerability that allows an attacker to execute arbitrary code in the context of the current user. The issue arises from how the scripting engine handles objects in memory.