CVE-2018-8290

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8280, CVE-2018-8286,...

CVE-2018-8296: Out-of-bounds Write

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripting Engine Memory Corruption Vulnerability." This affects Internet Explorer 11. This CVE ID is unique from CVE-2018-8242, CVE-2018-8283, CVE-2018-8287,...

CVE-2018-8291

The CVE-2018-8291 entry describes a remote code execution in the ChakraCore scripting engine affecting ChakraCore, Internet Explorer 11, and Microsoft Edge due to memory handling in scripting objects. Root cause: memory object handling in the scripting engine leading to RCE. Public references sho...

CVE-2018-8283

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore. This CVE ID is unique from CVE-2018-8242, CVE-2018-8287, CVE-2018-8288, CVE-2018-8291,...

Microsoft Internet Explorer and Edge Scripting Engine Memory Corruption Vulnerability

Microsoft Edge is the web browser built into the Windows 10 version.Internet Explorer is a web browser from Microsoft Corporation. A memory corruption vulnerability exists in the Microsoft Internet Explorer and Edge scripting engine. The vulnerability stems from a problem in the way the scripting...

Microsoft Internet Explorer and Edge Scripting Engine Memory Corruption Vulnerability (CNVD-2018-15435)

Microsoft Edge is the web browser built into the Windows 10 version.Internet Explorer is a web browser from Microsoft Corporation. A memory corruption vulnerability exists in the Microsoft Internet Explorer and Edge scripting engine. The vulnerability stems from a problem in the way the scripting...

Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability (CNVD-2018-15439)

Internet Explorer is a web browser from Microsoft. Formerly known as Microsoft Internet Explorer prior to version 6 and Windows Internet Explorer versions 7, 8, 9, 10, 11, or IE for short. A memory corruption vulnerability exists in the Microsoft Internet Explorer scripting engine. The...

Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability (CNVD-2018-15438)

Internet Explorer is a web browser from Microsoft. Formerly known as Microsoft Internet Explorer prior to version 6 and Windows Internet Explorer versions 7, 8, 9, 10, 11, or IE for short. A memory corruption vulnerability exists in the Microsoft Internet Explorer scripting engine. The...

Microsoft Windows Multiple Vulnerabilities (KB4338826)

This host is missing a critical security update according to Microsoft KB4338826 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2018-8276

A security feature bypass vulnerability exists in the Microsoft Chakra scripting engine that allows Control Flow Guard CFG to be bypassed, aka "Scripting Engine Security Feature Bypass Vulnerability." This affects Microsoft Edge, ChakraCore...

CVE-2018-8280

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8286, CVE-2018-8290,...

CVE-2018-8291

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge. This CVE ID is unique from CVE-2018-8242,...

CVE-2018-8294

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8280, CVE-2018-8286,...

CVE-2018-8283

CVE-2018-8283 describes a remote code execution in the ChakraCore scripting engine due to memory handling of objects. The connected advisories (GHSA entries) confirm impact on ChakraCore and Microsoft browsers (IE11, Edge). No specific affected versions, root-cause details, or remediation/patch v...

CVE-2018-8286

CVE-2018-8286 is a remote code execution vulnerability in the Chakra scripting engine, affecting Microsoft Edge and ChakraCore. The issue stems from how the Chakra engine handles objects in memory, described in connected GitHub advisories as the “Chakra Scripting Engine Memory Corruption Vulnerab...

CVE-2018-8288

CVE-2018-8288 is a remote code execution vulnerability in ChakraCore, Internet Explorer 11, and Microsoft Edge caused by memory handling of objects in the scripting engine (memory corruption). The CVE notes high impact with network access and required user interaction. Public references in the co...

CVE-2018-8290

The connected sources describe CVE-2018-8290 as a remote code execution in the Chakra scripting engine’s memory handling, affecting Microsoft Edge and ChakraCore. The vulnerability arises from how Chakra handles objects in memory, labeled as a memory corruption vulnerability (Chakra Scripting Eng...

CVE-2018-8298

CVE-2018-8298 – ChakraCore RCE vulnerability exists in the ChakraCore scripting engine, arising from how memory objects are handled. A remote code execution flaw is described, affecting ChakraCore (and related Microsoft scripting environments per linked advisories). The issue is categorized as a ...

Microsoft Edge Chakra Scripting Engine Memory Corruption Vulnerability (CNVD-2018-12890)

Edge is Microsoft's browser for Windows 10. A memory corruption vulnerability exists in Microsoft Edge. The vulnerability stems from a problem with the way the Chakra scripting engine in Microsoft Edge handles objects in memory. An attacker could exploit the vulnerability to execute arbitrary cod...

CVE-2018-8286

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8280, CVE-2018-8290,...