microsoft chakracore

Name: microsoft chakracore
Brand: microsoft

productUS

cpe:2.3:a:microsoft:chakracore:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

3critical230high20medium2low

updated 2026-10-28

vulnerabilities (255)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2018-8298US	high7.5OT critical	74.7% (100th)	KEV	1.10.1	2018-07-11	< 1.10.1
CVE-2020-0878US	medium5.1OT critical	2.70% (86th)	KEV	no fix	2020-09-11	—
CVE-2019-0539US	high7.5	82.9% (100th)	Exploit	no fix	2019-01-08	—
CVE-2018-0758US	high7.5	80.8% (100th)	Exploit	1.7.6	2018-01-04	< 1.7.6
CVE-2019-0567US	high7.5	80.1% (100th)	Exploit	no fix	2019-01-08	—
CVE-2018-0769US	high7.5	79.0% (100th)	Exploit	1.7.6	2018-01-04	< 1.7.6
CVE-2018-0777US	high7.5	78.4% (100th)	Exploit	1.7.6	2018-01-04	< 1.7.6
CVE-2018-0776US	high7.5	78.4% (100th)	Exploit	1.7.6	2018-01-04	< 1.7.6
CVE-2018-0770US	high7.5	78.4% (100th)	Exploit	1.7.6	2018-01-04	< 1.7.6
CVE-2018-8229US	high7.5	71.3% (99th)	Exploit	no fix	2018-06-14	≤ 1.8.4
CVE-2018-8279US	high7.5	70.7% (99th)	Exploit	no fix	2018-07-11	≤ 1.10.0
CVE-2017-11873US	high7.5	69.8% (99th)	Exploit	no fix	2017-11-15	—
CVE-2019-0568US	high7.5	69.5% (99th)	Exploit	no fix	2019-01-08	—
CVE-2018-8291US	high7.5	69.2% (99th)	Exploit	1.10.1	2018-07-11	< 1.10.1
CVE-2018-8288US	high7.5	69.2% (99th)	Exploit	1.10.1	2018-07-11	< 1.10.1
CVE-2017-11802US	high7.5	69.2% (99th)	Exploit	no fix	2017-10-13	≤ 1.7.2
CVE-2018-8467US	high7.5	69.0% (99th)	Exploit	no fix	2018-09-13	—
CVE-2018-8466US	high7.5	69.0% (99th)	Exploit	no fix	2018-09-13	≤ 1.10.1
CVE-2017-11893US	high7.5	68.5% (99th)	Exploit	1.7.5	2017-12-12	< 1.7.5
CVE-2017-11809US	high7.5	68.0% (99th)	Exploit	no fix	2017-10-13	≤ 1.7.2
CVE-2018-8355US	high7.5	67.9% (99th)	Exploit	no fix	2018-08-15	—
CVE-2018-0775US	high7.5	67.9% (99th)	Exploit	1.7.6	2018-01-04	< 1.7.6
CVE-2018-0774US	high7.5	67.9% (99th)	Exploit	1.7.6	2018-01-04	< 1.7.6
CVE-2018-8145US	high7.5	66.6% (99th)	Exploit	no fix	2018-05-09	≤ 1.8.3
CVE-2018-8139US	high7.5	66.3% (99th)	Exploit	no fix	2018-05-09	≤ 1.8.3
CVE-2018-0953US	high7.5	66.3% (99th)	Exploit	no fix	2018-05-09	≤ 1.8.3
CVE-2018-0980US	high7.5	66.3% (99th)	Exploit	1.8.3	2018-04-12	< 1.8.3
CVE-2018-0933US	high7.5	66.3% (99th)	Exploit	1.8.2	2018-03-14	< 1.8.2
CVE-2018-0934US	high7.5	66.2% (99th)	Exploit	1.8.2	2018-03-14	< 1.8.2
CVE-2018-0767US	medium5.3	65.5% (99th)	Exploit	1.7.6	2018-01-04	< 1.7.6
CVE-2017-11911US	high7.5	65.5% (99th)	Exploit	1.7.5	2017-12-12	< 1.7.5
CVE-2017-11909US	high7.5	65.5% (99th)	Exploit	1.7.5	2017-12-12	< 1.7.5
CVE-2017-11811US	high7.5	65.5% (99th)	Exploit	1.7.3	2017-10-13	< 1.7.3
CVE-2018-0838US	high7.5	65.3% (99th)	Exploit	no fix	2018-02-15	—
CVE-2018-0837US	high7.5	65.3% (99th)	Exploit	no fix	2018-02-15	—
CVE-2018-0835US	high7.5	65.3% (99th)	Exploit	no fix	2018-02-15	—
CVE-2017-11861US	high7.5	64.2% (99th)	Exploit	no fix	2017-11-15	—
CVE-2018-8384US	high7.5	64.1% (99th)	Exploit	no fix	2018-08-15	—
CVE-2017-11799US	high7.5	63.7% (99th)	Exploit	no fix	2017-10-13	≤ 1.7.2
CVE-2017-11918US	high7.5	62.6% (99th)	Exploit	1.7.5	2017-12-12	< 1.7.5
CVE-2017-11914US	high7.5	62.6% (99th)	Exploit	1.7.5	2017-12-12	< 1.7.5
CVE-2018-8617US	high7.5	62.5% (99th)	Exploit	no fix	2018-12-12	—
CVE-2017-11870US	high7.5	59.6% (99th)	Exploit	no fix	2017-11-15	—
CVE-2017-11841US	high7.5	59.6% (99th)	Exploit	no fix	2017-11-15	—
CVE-2017-11840US	high7.5	59.6% (99th)	Exploit	no fix	2017-11-15	—
CVE-2018-0780US	medium5.3	58.6% (99th)	Exploit	1.7.6	2018-01-04	< 1.7.6
CVE-2018-0834US	high7.5	55.2% (99th)	Exploit	no fix	2018-02-15	—
CVE-2018-0946US	high7.5	51.1% (99th)	Exploit	no fix	2018-05-09	≤ 1.8.3
CVE-2018-8133US	high7.5	50.2% (99th)	Exploit	no fix	2018-05-09	≤ 1.8.3
CVE-2017-11812US	high7.5	47.3% (99th)	—	no fix	2017-10-13	≤ 1.7.2

showing 50 of 255

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer202 CVEs
CWE-787Out-of-bounds Write181 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor13 CVEs
CWE-843Access of Resource Using Incompatible Type ('Type Confusion')8 CVEs
CWE-125Out-of-bounds Read5 CVEs
CWE-399CWE-3995 CVEs
CWE-400Uncontrolled Resource Consumption4 CVEs
CWE-20Improper Input Validation2 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE255 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan