CVE-2017-11767
1 advisory.
NuGet/Microsoft.ChakraCore CVE-2017-11767: critical 9.8, EPSS 9.51%
ChakraCore vulnerable to privilege escalation
Action: Upgrade Microsoft.ChakraCore to 1.6.2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.6.2 | - |
Fixed versions
| 1.6.2 |
Sources
- osv: GHSA-c79v-2rjq-965m
- https://nvd.nist.gov/vuln/detail/CVE-2017-11767
- https://github.com/chakra-core/ChakraCore/pull/3727
- https://github.com/chakra-core/ChakraCore/pull/3727/commits/b3e3959d14814f42ee2197c504c322bcbe12347d
- https://github.com/chakra-core/ChakraCore/commit/b3e3959d14814f42ee2197c504c322bcbe12347d
- https://github.com/chakra-core/ChakraCore
- https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2017-11767
- https://web.archive.org/web/20210124103810/http://www.securityfocus.com/bid/100838
- https://web.archive.org/web/20211127230635/http://www.securitytracker.com/id/1039369
CVE-2017-11767 · published · modified · JSON