Kurz gesagt
- CVE-2018-8276 ist eine Schwachstelle (MITTEL (CVSS 6.5)) in Microsoft.ChakraCore.
- Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 5.8%, höher als bei 93.1% aller Schwachstellen.
- Abhilfe: auf 1.10.1 oder neuer aktualisieren.
Description
A security feature bypass vulnerability exists in the Microsoft Chakra scripting engine that allows Control Flow Guard (CFG) to be bypassed, aka "Scripting Engine Security Feature Bypass Vulnerability." This affects Microsoft Edge, ChakraCore.
NVD description
A security feature bypass vulnerability exists in the Microsoft Chakra scripting engine that allows Control Flow Guard (CFG) to be bypassed, aka "Scripting Engine Security Feature Bypass Vulnerability." This affects Microsoft Edge, ChakraCore.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free