En resumen
- CVE-2018-0818 es una vulnerabilidad ALTO (CVSS 7.5) que afecta a Microsoft.ChakraCore.
- Probabilidad de explotación en los próximos 30 días (EPSS): 3.7%, mayor que el 89.7% de las vulnerabilidades.
- Solución: actualizar a 1.8.0 o posterior.
Description
Microsoft ChakraCore allows an attacker to bypass Control Flow Guard (CFG) in conjunction with another vulnerability to run arbitrary code on a target system, due to how the Chakra scripting engine handles accessing memory, aka "Scripting Engine Security Feature Bypass".
NVD description
Microsoft ChakraCore allows an attacker to bypass Control Flow Guard (CFG) in conjunction with another vulnerability to run arbitrary code on a target system, due to how the Chakra scripting engine handles accessing memory, aka "Scripting Engine Security Feature Bypass".
Más vulnerabilidades de Microsoft.ChakraCore
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free