CVE-2020-1073: Microsoft ChakraCore

High severity, CVSS 8.1. EPSS: 8.6% chance of exploitation in the next 30 days.

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'.

Affected products

• Microsoft ChakraCore: before 1.11.20 (fixed in 1.11.20)
• Microsoft Edge: affected versions not specified

Published 2020-06-09. Last modified 2026-06-17.