ChakraCore and Microsoft Edge in Windows 10 1703 and 1709 allow information disclosure, due to how the scripting engine handles objects in memory, aka âScripting Engine Information Disclosure Vulnerabilityâ. This CVE ID is unique from CVE-2018-0891.
github.com/chakra-core/ChakraCore
github.com/chakra-core/ChakraCore/commit/090277e7a5ea1d938777acb92e7b6759936ea974
nvd.nist.gov/vuln/detail/CVE-2018-0939
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0939
web.archive.org/web/20201021051922/www.securitytracker.com/id/1040507
web.archive.org/web/20210124145017/www.securityfocus.com/bid/103305