GitHub Advisoryadvisory · NuGet
GHSA-wg47-6cqc-q52j ChakraCore Security Bypass
MEDIUM
Official page ↗
- Aliases
- CVE-2018-8276
- Ecosystem
- NuGet
- Packages
- Microsoft.ChakraCore
- Severity
- Moderate
- CVSS vector
- CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
- Reviewed
- 2023-07-24
Affected packages
• NuGet Microsoft.ChakraCore: < 1.10.1 → fixed in 1.10.1
Description
A security feature bypass vulnerability exists in the Microsoft Chakra scripting engine that allows Control Flow Guard (CFG) to be bypassed, aka "Scripting Engine Security Feature Bypass Vulnerability." This affects Microsoft Edge, ChakraCore.
Related
Alias · CVE (1)
- CVE-2018-8276 A security feature bypass vulnerability exists in the Microsoft Chakra scripting engine that allows Control Flow Guard (CFG) to be… vulnerability
References
- https://nvd.nist.gov/vuln/detail/CVE-2018-8276 advisory
- https://github.com/chakra-core/ChakraCore/commit/4196f8097afdcc5fe01ce2966871712fb24003a3 web
- https://github.com/chakra-core/ChakraCore package
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8276 web
- https://web.archive.org/web/20210124183457/http://www.securityfocus.com/bid/104626 web
- https://web.archive.org/web/20211202002348/http://www.securitytracker.com/id/1041256 web