Kurz gesagt
- CVE-2018-0818 ist eine Schwachstelle (HOCH (CVSS 7.5)) in Microsoft.ChakraCore.
- Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 3.7%, höher als bei 89.7% aller Schwachstellen.
- Abhilfe: auf 1.8.0 oder neuer aktualisieren.
Description
Microsoft ChakraCore allows an attacker to bypass Control Flow Guard (CFG) in conjunction with another vulnerability to run arbitrary code on a target system, due to how the Chakra scripting engine handles accessing memory, aka "Scripting Engine Security Feature Bypass".
NVD description
Microsoft ChakraCore allows an attacker to bypass Control Flow Guard (CFG) in conjunction with another vulnerability to run arbitrary code on a target system, due to how the Chakra scripting engine handles accessing memory, aka "Scripting Engine Security Feature Bypass".
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free