Lucene search
GoogleOSV:GHSA-FV8M-P45W-GF38HistoryMay 13, 2022 - 1:48 a.m.
ChakraCore RCE Vulnerability
2022-05-1301:48:24
Google
osv.dev
8
chakracore
rce
vulnerability
control flow guard
arbitrary code
scripting engine
security feature bypass
EPSS
0.002
Percentile
61.0%
Microsoft ChakraCore allows an attacker to bypass Control Flow Guard (CFG) in conjunction with another vulnerability to run arbitrary code on a target system, due to how the Chakra scripting engine handles accessing memory, aka “Scripting Engine Security Feature Bypass”.
References
github.com/chakra-core/ChakraCore
github.com/chakra-core/ChakraCore/pull/4427
github.com/chakra-core/ChakraCore/pull/4427/commits/84368681cf5cf1d33364638e2cd463ad1b13eba6
nvd.nist.gov/vuln/detail/CVE-2018-0818
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0818
web.archive.org/web/20210124130147/www.securityfocus.com/bid/102412
Related
cvelist
cvelist
CVE-2018-0818
2018-01-10 01:00:00
prion
prion
Security feature bypass
2018-01-10 01:29:00
mscve
mscve
Scripting Engine Security Feature Bypass Vulnerability
2018-01-03 08:00:00
github
github
ChakraCore RCE Vulnerability
2022-05-13 01:48:24
nvd
nvd
CVE-2018-0818
2018-01-10 01:29:01
cve
cve
CVE-2018-0818
2018-01-10 01:29:01
kaspersky
kaspersky
KLA11166 Multiple vunlerabilities in Microsoft Browsers
2018-01-03 00:00:00
talosblog
talosblog
Microsoft Patch Tuesday - January 2018
2018-01-09 13:36:00
trendmicroblog
trendmicroblog