Loading HuntDB...

GHSA-3w9q-c44j-37jj

GitHub Security Advisory

High severity vulnerability that affects Microsoft.ChakraCore

✓ GitHub Reviewed HIGH Has CVE

Advisory Details

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0609, CVE-2019-0639, CVE-2019-0680, CVE-2019-0769, CVE-2019-0770, CVE-2019-0771, CVE-2019-0783.

Affected Packages

NuGet Microsoft.ChakraCore
Affected versions: 0 (fixed in 1.11.7)

Related CVEs

Key Information

GHSA ID
GHSA-3w9q-c44j-37jj
Published
April 9, 2019 7:43 PM
Last Modified
August 31, 2021 9:35 PM
CVSS Score
7.5 /10
Primary Ecosystem
NuGet
Primary Package
Microsoft.ChakraCore
GitHub Reviewed
✓ Yes

Dataset

Last updated: June 14, 2025 6:24 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.