| Reporter | Title | Published | Views | Family All 57 |
|---|---|---|---|---|
 | Microsoft Edge Chakra JIT localeCompare Type Confusion Exploit | 18 Sep 201800:00 | – | zdt |
 | CVE-2018-8372 | 15 Aug 201800:00 | – | attackerkb |
| CVE-2018-8390 | 15 Aug 201800:00 | – | attackerkb |
| CVE-2018-8389 | 15 Aug 201800:00 | – | attackerkb |
| CVE-2018-8385 | 15 Aug 201800:00 | – | attackerkb |
| CVE-2018-8373 | 15 Aug 201800:00 | – | attackerkb |
 | CVE-2018-8355 | 18 Sep 201800:00 | – | circl |
 | Microsoft Internet Explorer and Edge Scripting Engine Memory Corruption Vulnerability (CNVD-2018-15916) | 15 Aug 201800:00 | – | cnvd |
 | Microsoft Edge Chakra Scripting Engine Memory Corruption (CVE-2018-8355) | 14 Aug 201800:00 | – | checkpoint_advisories |
 | CVE-2018-8355 | 15 Aug 201817:00 | – | cvelist |
10
Node
AND
OR
Node
Node
AND
OR
[
{
"product": "ChakraCore",
"vendor": "Microsoft",
"versions": [
{
"status": "affected",
"version": "ChakraCore"
}
]
},
{
"product": "Internet Explorer 11",
"vendor": "Microsoft",
"versions": [
{
"status": "affected",
"version": "Windows 10 for 32-bit Systems"
},
{
"status": "affected",
"version": "Windows 10 for x64-based Systems"
},
{
"status": "affected",
"version": "Windows 10 Version 1607 for 32-bit Systems"
},
{
"status": "affected",
"version": "Windows 10 Version 1607 for x64-based Systems"
},
{
"status": "affected",
"version": "Windows 10 Version 1703 for 32-bit Systems"
},
{
"status": "affected",
"version": "Windows 10 Version 1703 for x64-based Systems"
},
{
"status": "affected",
"version": "Windows 10 Version 1709 for 32-bit Systems"
},
{
"status": "affected",
"version": "Windows 10 Version 1709 for x64-based Systems"
},
{
"status": "affected",
"version": "Windows 10 Version 1803 for 32-bit Systems"
},
{
"status": "affected",
"version": "Windows 10 Version 1803 for x64-based Systems"
},
{
"status": "affected",
"version": "Windows 7 for 32-bit Systems Service Pack 1"
},
{
"status": "affected",
"version": "Windows 7 for x64-based Systems Service Pack 1"
},
{
"status": "affected",
"version": "Windows 8.1 for 32-bit systems"
},
{
"status": "affected",
"version": "Windows 8.1 for x64-based systems"
},
{
"status": "affected",
"version": "Windows RT 8.1"
},
{
"status": "affected",
"version": "Windows Server 2008 R2 for x64-based Systems Service Pack 1"
},
{
"status": "affected",
"version": "Windows Server 2012 R2"
},
{
"status": "affected",
"version": "Windows Server 2016"
}
]
},
{
"product": "Microsoft Edge",
"vendor": "Microsoft",
"versions": [
{
"status": "affected",
"version": "Windows 10 for 32-bit Systems"
},
{
"status": "affected",
"version": "Windows 10 for x64-based Systems"
},
{
"status": "affected",
"version": "Windows 10 Version 1607 for 32-bit Systems"
},
{
"status": "affected",
"version": "Windows 10 Version 1607 for x64-based Systems"
},
{
"status": "affected",
"version": "Windows 10 Version 1703 for 32-bit Systems"
},
{
"status": "affected",
"version": "Windows 10 Version 1703 for x64-based Systems"
},
{
"status": "affected",
"version": "Windows 10 Version 1709 for 32-bit Systems"
},
{
"status": "affected",
"version": "Windows 10 Version 1709 for x64-based Systems"
},
{
"status": "affected",
"version": "Windows 10 Version 1803 for 32-bit Systems"
},
{
"status": "affected",
"version": "Windows 10 Version 1803 for x64-based Systems"
},
{
"status": "affected",
"version": "Windows Server 2016"
}
]
}
]| Source | Link |
|---|---|
| securitytracker | www.securitytracker.com/id/1041457 |
| portal | www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8355 |
| securityfocus | www.securityfocus.com/bid/104978 |
| exploit-db | www.exploit-db.com/exploits/45432/ |
| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| String.prototype.localeCompare | path | /Microsoft/ChakraCore/blob/40f36e301848f105291bc669f6bb13016585b0c0/lib/Runtime/Library/InJavascript/Intl.js#L984 | Inline call of String.prototype.localeCompare can bypass profiling flags, enabling JIT-type confusion and potential remote code execution. | CWE-787 |
| that | path | /Microsoft/ChakraCore/blob/40f36e301848f105291bc669f6bb13016585b0c0/lib/Runtime/Library/InJavascript/Intl.js#L984 | Inline call of String.prototype.localeCompare can bypass profiling flags, enabling JIT-type confusion and potential remote code execution. | CWE-787 |
| locales | path | /Microsoft/ChakraCore/blob/40f36e301848f105291bc669f6bb13016585b0c0/lib/Runtime/Library/InJavascript/Intl.js#L984 | Inline call of String.prototype.localeCompare can bypass profiling flags, enabling JIT-type confusion and potential remote code execution. | CWE-787 |
| options | path | /Microsoft/ChakraCore/blob/40f36e301848f105291bc669f6bb13016585b0c0/lib/Runtime/Library/InJavascript/Intl.js#L984 | Inline call of String.prototype.localeCompare can bypass profiling flags, enabling JIT-type confusion and potential remote code execution. | CWE-787 |
| localeCompare | path | /Microsoft/ChakraCore/blob/40f36e301848f105291bc669f6bb13016585b0c0/lib/Runtime/Library/JavascriptString.cpp#L1297 | C++ localeCompare path that calls into JavaScript localeCompare, potentially bypassing ImplicitCallFlags and leading to memory corruption. | CWE-787 |
| toString | path | /Microsoft/ChakraCore/blob/40f36e301848f105291bc669f6bb13016585b0c0/lib/Runtime/Library/JavascriptString.cpp#L1297 | C++ localeCompare path that calls into JavaScript localeCompare, potentially bypassing ImplicitCallFlags and leading to memory corruption. | CWE-787 |
| ImplicitCallFlags | path | /Microsoft/ChakraCore/blob/40f36e301848f105291bc669f6bb13016585b0c0/lib/Runtime/Library/JavascriptString.cpp#L1297 | C++ localeCompare path that calls into JavaScript localeCompare, potentially bypassing ImplicitCallFlags and leading to memory corruption. | CWE-787 |
| bailout | path | /Microsoft/ChakraCore/blob/40f36e301848f105291bc669f6bb13016585b0c0/lib/Runtime/Language/InterpreterStackFrame.cpp#L1831 | Bailout/stack frame handling that can interact with JavaScript function calls and flags, enabling exploitation during initialization. | CWE-787 |
| profile | path | /Microsoft/ChakraCore/blob/40f36e301848f105291bc669f6bb13016585b0c0/lib/Runtime/Language/InterpreterStackFrame.cpp#L1831 | Bailout/stack frame handling that can interact with JavaScript function calls and flags, enabling exploitation during initialization. | CWE-787 |
| ImplicitCallFlags | path | /Microsoft/ChakraCore/blob/40f36e301848f105291bc669f6bb13016585b0c0/lib/Runtime/Language/InterpreterStackFrame.cpp#L1831 | Bailout/stack frame handling that can interact with JavaScript function calls and flags, enabling exploitation during initialization. | CWE-787 |
10
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
17 Jun 2026 02:04Current
6.8Medium risk
Vulners AI Score6.8
CVSS 37.5
CVSS 27.6
EPSS0.68242