In short
- CVE-2018-8276 is a MEDIUM (CVSS 6.5) vulnerability affecting Microsoft.ChakraCore.
- Chance of exploitation in the next 30 days (EPSS): 5.8%, higher than 93.1% of all vulnerabilities.
- Fix: update to 1.10.1 or later.
Description
A security feature bypass vulnerability exists in the Microsoft Chakra scripting engine that allows Control Flow Guard (CFG) to be bypassed, aka "Scripting Engine Security Feature Bypass Vulnerability." This affects Microsoft Edge, ChakraCore.
NVD description
A security feature bypass vulnerability exists in the Microsoft Chakra scripting engine that allows Control Flow Guard (CFG) to be bypassed, aka "Scripting Engine Security Feature Bypass Vulnerability." This affects Microsoft Edge, ChakraCore.
More vulnerabilities in Microsoft.ChakraCore
See all →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free