KLA10918
Multiple ACE vulnerabilities in ChakraCore
Updated: 11/15/2018
CVSS
?
7.5
Detect date
?
12/12/2017
Severity
?
Critical
Description

Multiple memory corruption vulnerabilities was found in ChakraCore. Malicious users can exploit these vulnerabilities remotely to execute arbitrary code

Affected products

ChakraCore

Solution

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

Original advisories

CVE-2017-11916
CVE-2017-11918
CVE-2017-11893
CVE-2017-11930
CVE-2017-11889
CVE-2017-11912
CVE-2017-11914
CVE-2017-11911
CVE-2017-11919
CVE-2017-11895
CVE-2017-11908
CVE-2017-11894
CVE-2017-11909
CVE-2017-11905
CVE-2017-11910

Impacts
?
ACE 
[?]

OSI 
[?]
Related products
ChakraCore
CVE-IDS
?

CVE-2017-11889
CVE-2017-11893
CVE-2017-11894
CVE-2017-11895
CVE-2017-11905
CVE-2017-11908
CVE-2017-11909
CVE-2017-11910
CVE-2017-11911
CVE-2017-11912
CVE-2017-11914
CVE-2017-11918
CVE-2017-11919
CVE-2017-11930
CVE-2017-11916

Microsoft official advisories
Microsoft Security Update Guide