Skip to content
NewA calmer, faster ZeroHour
Vulnerability1

CVE-2017-11767

CVSS 3.0
9.8 critical
EPSS
10%p95
Published
·
Modified
Analyze CVE-2017-11767 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

ChakraCore allows an attacker to gain the same user rights as the current user, due to the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability".

Vendors
microsoft
Products
chakracore
Weakness
CWE-119
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (9.5%)

In the news

1 story