In short
- CVE-2018-0818 is a HIGH (CVSS 7.5) vulnerability affecting Microsoft.ChakraCore.
- Chance of exploitation in the next 30 days (EPSS): 3.7%, higher than 89.7% of all vulnerabilities.
- Fix: update to 1.8.0 or later.
Description
Microsoft ChakraCore allows an attacker to bypass Control Flow Guard (CFG) in conjunction with another vulnerability to run arbitrary code on a target system, due to how the Chakra scripting engine handles accessing memory, aka "Scripting Engine Security Feature Bypass".
NVD description
Microsoft ChakraCore allows an attacker to bypass Control Flow Guard (CFG) in conjunction with another vulnerability to run arbitrary code on a target system, due to how the Chakra scripting engine handles accessing memory, aka "Scripting Engine Security Feature Bypass".
More vulnerabilities in Microsoft.ChakraCore
See all →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free