Critical severity9.8NVD Advisory· Published May 15, 2017· Updated Jun 17, 2026

CVE-2017-0223

Description

A remote code execution vulnerability exists in Microsoft Chakra Core in the way JavaScript engines render when handling objects in memory. aka "Scripting Engine Memory Corruption Vulnerability". This vulnerability is unique from CVE-2017-0252.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
Microsoft.ChakraCoreNuGet	< 1.4.4	1.4.4

Affected products

Microsoft/Edge
cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*
ghsa-coords
pkg:nuget/microsoft.chakracore
Range: < 1.4.4
Microsoft Corporation/Chakra Corev5
Range: n/a

Patches

Vulnerability mechanics

References

github.com/Microsoft/ChakraCore/pull/2959nvdPatchThird Party AdvisoryWEB
github.com/advisories/GHSA-448h-7hmp-99fgghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2017-0223ghsaADVISORY
github.com/chakra-core/ChakraCore/commit/f74773f4520adff6b70a7d445417aa9769f61fa6ghsaWEB
github.com/chakra-core/ChakraCore/pull/2959ghsaWEB
web.archive.org/web/20210124184849/http://www.securitytracker.com/id/1038425ghsaWEB
www.securitytracker.com/id/1038425nvd

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.012
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000