high7.5
CVE-2021-42279
Chakra Scripting Engine and ChakraCore Vulnerable to Memory Corruption
Impact
Chakra Scripting Engine and ChakraCore are vulnerable to memory corruption due to an out-of-bounds write. The Microsoft advisory for CVE-2021-42279 was modified in August 2022 to include Microsoft.ChakraCore as an affected product.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| nuget | Microsoft.ChakraCore | <= 1.11.24 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Windows 10 | All versions Versions 20h2, 21h1, 1607, 1809, 1909 |
| Microsoft | Windows 11 | All versions |
| Microsoft | Windows Server 2016 | All versions Versions 20h2, 2004 |
| Microsoft | Windows Server 2019 | All versions |
| Microsoft | Windows Server 2022 | All versions |