Code

JULY 2018 Security Update #5444

Code

Merged

chakrabot merged 13 commits intochakra-core:release/1.10chakra-core/ChakraCore:release/1.10from atulkatti:servicing/1807_1.10Copy head branch name to clipboardJul 10, 2018

+12,579-12,484

Commits

Commits on Jul 10, 2018

• [CVE-2018-8291] DictionaryPropertyDescriptor::CopyFrom missed copying some properties

  

  MSLaguana

  authored and

  Atul Katti

  committed
  c322694

  Copy full SHA for c322694

• [CVE-2018-8283] Edge - ChakraCore Memory Corruption - Individual

  

  MSLaguana

  authored and

  Atul Katti

  committed
  b2f092e

  Copy full SHA for b2f092e

• [CVE-2018-8280] Edge - Js::DataView SetValue and GetValue to a detached buffer allows for semi arbitrary memory read write.

  

  atulkatti

  authored and

  Atul Katti

  committed
  3ad284a

  Copy full SHA for 3ad284a

• [CVE-2018-8287] Edge - Chakra Internet Explorer - Use after free in jscript9.dll after closing WebBrowserControl - Internal.

  

  atulkatti

  authored and

  Atul Katti

  committed
  fa89a70

  Copy full SHA for fa89a70

• [CVE-2018-8276] Edge - Bypass CFG by Exploiting Design Flaw in Chakra - Individual

  Show description for 4196f80
  

  MikeHolman

  authored and

  Atul Katti

  committed
  4196f80

  Copy full SHA for 4196f80

• [CVE-2018-8286] [ChakraCore] Edge - Chakra Type Confusion - Internal

  

  Meghana Gupta

  authored and

  Atul Katti

  committed
  0ac4253

  Copy full SHA for 0ac4253

• [CVE-2018-8288] Edge - Chakra JIT ImplicitCallFlags check bypass with Intl - Google, Inc.

  

  rajatd

  authored and

  Atul Katti

  committed
  f9b1cde

  Copy full SHA for f9b1cde

• [CVE-2018-8275] Edge - Chakra Array.splice UAF RCE - Zero Day Initiative

  Show description for 64cd4d2
  

  akroshg

  authored and

  Atul Katti

  committed
  64cd4d2

  Copy full SHA for 64cd4d2

• [CVE-2018-8279] Edge - Chakra: Parameter scope parsing bug - Google, Inc.

  

  atulkatti

  authored and

  Atul Katti

  committed
  227fc37

  Copy full SHA for 227fc37

• [CVE-2018-8294] Edge - In Cross Context scenario check for new target first before marshalling the last parameter to a FrameDisplay - Internal

  

  atulkatti

  authored and

  Atul Katti

  committed
  7af07fd

  Copy full SHA for 7af07fd

• [CVE-2018-8290] OOB profile read/write - Google, Inc

  

  sigatrev

  authored and

  Atul Katti

  committed
  8bd6826

  Copy full SHA for 8bd6826

• [CVE-2018-8298] Edge - Chakra: Bugs in InitializeNumberFormat and InitializeDateTimeFormat - Google, Inc.

  

  jackhorton

  authored and

  Atul Katti

  committed
  cb9957e

  Copy full SHA for cb9957e

• Bumping version prior to release: 1.10.1

  

  Atul Katti

  committed
  17f8fe3

  Copy full SHA for 17f8fe3