CVE-2023-37140

Summary

CVE-2023-37140 is a newly disclosed vulnerability affecting ChakraCore, the open-source JavaScript engine. The issue lies within the Js::DiagScopeVariablesWalker::GetChildrenCount() function in the ChakraCore branch master cbb9b. This vulnerability leads to a segmentation violation, potentially enabling attackers to execute arbitrary code or cause denial-of-service conditions. The exact exploitation method and required privileges are not yet known, but affected users are urged to update their ChakraCore implementations as soon as possible to mitigate potential risks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.