Loading HuntDB...

GHSA-86gw-g9jv-8vfg

GitHub Security Advisory

Out-of-bounds write in ChakraCore

✓ GitHub Reviewed HIGH Has CVE

Advisory Details

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0768, CVE-2020-0823, CVE-2020-0825, CVE-2020-0826, CVE-2020-0827, CVE-2020-0828, CVE-2020-0829, CVE-2020-0830, CVE-2020-0831, CVE-2020-0832, CVE-2020-0848.

Affected Packages

NuGet Microsoft.ChakraCore
Affected versions: 0 (fixed in 1.11.17)

Related CVEs

Key Information

GHSA ID
GHSA-86gw-g9jv-8vfg
Published
July 28, 2021 6:57 PM
Last Modified
July 27, 2021 1:56 PM
CVSS Score
7.5 /10
Primary Ecosystem
NuGet
Primary Package
Microsoft.ChakraCore
GitHub Reviewed
✓ Yes

Dataset

Last updated: June 12, 2025 6:24 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.