{"action":"Upgrade Microsoft.ChakraCore to 1.6.2 or later.","affected":[{"fixed":"1.6.2","introduced":"0"}],"component":"Microsoft.ChakraCore","cve_ids":["CVE-2017-11767"],"ecosystem":"NuGet","epss":0.09513,"exploited":false,"fixed_versions":["1.6.2"],"ghsa_id":"GHSA-c79v-2rjq-965m","id":"tcs_01M5N8JH344RGQ18B1K636YAVR","modified_at":"2024-02-16T08:03:56.415066Z","published_at":"2022-05-13T01:42:32Z","references":["https://osv.dev/vulnerability/GHSA-c79v-2rjq-965m","https://nvd.nist.gov/vuln/detail/CVE-2017-11767","https://github.com/chakra-core/ChakraCore/pull/3727","https://github.com/chakra-core/ChakraCore/pull/3727/commits/b3e3959d14814f42ee2197c504c322bcbe12347d","https://github.com/chakra-core/ChakraCore/commit/b3e3959d14814f42ee2197c504c322bcbe12347d","https://github.com/chakra-core/ChakraCore","https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2017-11767","https://web.archive.org/web/20210124103810/http://www.securityfocus.com/bid/100838","https://web.archive.org/web/20211127230635/http://www.securitytracker.com/id/1039369"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-c79v-2rjq-965m","url":"https://osv.dev/vulnerability/GHSA-c79v-2rjq-965m"}],"summary":"ChakraCore vulnerable to privilege escalation"}