CVE-2021-42279
HIGH7.5EPSS 3.0%Chakra Scripting Engine and ChakraCore Vulnerable to Memory Corruption
發布日:2022/5/24修改日:2023/11/8
描述
Chakra Scripting Engine and ChakraCore are vulnerable to memory corruption due to an out-of-bounds write. The Microsoft advisory for CVE-2021-42279 was modified in August 2022 to include Microsoft.ChakraCore as an affected product.
受影響套件(1)
- NuGet/Microsoft.ChakraCorefrom 0, <= 1.11.24
CVSS 分數
| 來源 | 版本 | 嚴重程度 | 向量 |
|---|---|---|---|
| osv | CVSS 3.1 | HIGH7.5 | CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H |