CVE-2019-0649: Microsoft ChakraCore

High severity, CVSS 8.1. EPSS: 4.3% chance of exploitation in the next 30 days.

A vulnerability exists in Microsoft Chakra JIT server, aka 'Scripting Engine Elevation of Privileged Vulnerability'.

Affected products

• Microsoft ChakraCore: before 1.11.6 (fixed in 1.11.6)
• Microsoft Edge: affected versions not specified

Published 2019-03-05. Last modified 2026-06-17.