CVE-2017-11767: Microsoft ChakraCore

Critical severity, CVSS 9.8. EPSS: 9.5% chance of exploitation in the next 30 days.

ChakraCore allows an attacker to gain the same user rights as the current user, due to the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability".

Affected products

• Microsoft ChakraCore: affected versions not specified

Published 2017-11-02. Last modified 2026-06-17.