High severity8.1NVD Advisory· Published Mar 5, 2019· Updated Jun 17, 2026
CVE-2019-0649
CVE-2019-0649
Description
A vulnerability exists in Microsoft Chakra JIT server, aka 'Scripting Engine Elevation of Privileged Vulnerability'.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
Microsoft.ChakraCoreNuGet | < 1.11.6 | 1.11.6 |
Affected products
5cpe:2.3:a:microsoft:chakracore:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:microsoft:chakracore:*:*:*:*:*:*:*:*range: <1.11.6
- (no CPE)range: unspecified
Patches
Vulnerability mechanics
References
7- portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0649nvdPatchVendor AdvisoryWEB
- www.securityfocus.com/bid/106877nvdThird Party AdvisoryVDB Entry
- github.com/advisories/GHSA-6c6r-39cv-x5fqghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2019-0649ghsaADVISORY
- github.com/chakra-core/ChakraCore/commit/beba75a1aed0933cf3c76efb4dc67529dc035901ghsaWEB
- github.com/chakra-core/ChakraCore/pull/5936ghsaWEB
- web.archive.org/web/20210125001406/https://www.securityfocus.com/bid/106877ghsaWEB
News mentions
0No linked articles in our index yet.