Actively Exploited Vulnerabilities
The ChakraCore scripting engine contains a type confusion vulnerability which can allow for remote code execution.
Apply updates per vendor instructions.
CWE-843