CVE-2017-11767 json
ChakraCore vulnerable to privilege escalation
published 2017-11-02 9 y ago modified 2026-06-17 4 mo ago also GHSA-c79v-2rjq-965m , EUVD-2022-3526
- cvss
- 9.8
- version 3.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 9.5%
- EPSS 9.5% chance of exploitation in 30 days, percentile 95%
- public exploits
- 0
- none known
Summary
ChakraCore allows an attacker to gain the same user rights as the current user, due to the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability".
Patch / fix
- nuget Microsoft.ChakraCore 1.6.2
Exploit prediction
9.51% chance of exploitation in the next 30 days, higher than 95% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 3.0 | 9.8 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| NVD | 2.0 | 10.0 | AV:N/AC:L/Au:N/C:C/I:C/A:C |
| GitHub | 3.0 | 9.8 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Affected packages
| ecosystem | package | affected | fixed in |
|---|---|---|---|
| nuget | Microsoft.ChakraCore | <1.6.2 |
1.6.2 |
Affected products
- Microsoft Corporation ChakraCore
Classification
- Weakness
-
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
References
-
github.com
/chakra-core/ChakraCore/pull/3727
web
-
github.com
/chakra-core/ChakraCore/pull/3727/commits/b3e3959d14814f42ee2197c504c322bcbe12347d
web
-
github.com
/chakra-core/ChakraCore/commit/b3e3959d14814f42ee2197c504c322bcbe12347d
web
-
portal.msrc.microsoft.com
/en-US/security-guidance/advisory/CVE-2017-11767
issue-tracking, vendor-advisory
-
securitytracker.com
/id/1039369
vdb-entry, third-party-advisory
-
securityfocus.com
/bid/100838
vdb-entry, third-party-advisory
-
nvd.nist.gov
/vuln/detail/CVE-2017-11767
advisory
-
github.com
/chakra-core/ChakraCore
package
-
msrc.microsoft.com
/update-guide/en-US/advisory/CVE-2017-11767
web
-
web.archive.org
/web/20210124103810/http://www.securityfocus.com/bid/100838
web
-
web.archive.org
/web/20211127230635/http://www.securitytracker.com/id/1039369
web
Sources
- CVE List CVE-2017-11767
- GitHub Advisory GHSA-c79v-2rjq-965m
- NVD CVE-2017-11767
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.