CVE-2018-0858

2018-02-1300:00:00

microsoft

www.cve.org

7.5 High

AI Score

Confidence

High

0.953 High

EPSS

Percentile

99.4%

JSON

ChakraCore allows remote code execution, due to how the ChakraCore scripting engine handles objects in memory, aka “Scripting Engine Memory Corruption Vulnerability”. This CVE ID is unique from CVE-2018-0834, CVE-2018-0835, CVE-2018-0836, CVE-2018-0837, CVE-2018-0838, CVE-2018-0840, CVE-2018-0856, CVE-2018-0857, CVE-2018-0859, CVE-2018-0860, CVE-2018-0861, and CVE-2018-0866.

CNA Affected

[
  {
    "product": "ChakraCore",
    "vendor": "Microsoft Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "ChakraCore"
      }
    ]
  }
]