The ChakraCore scripting engine contains a type confusion vulnerability which can allow for remote code execution.
Source: NVD ↗ · CISA KEV Catalog ↗