Em resumo
- CVE-2018-0818 é uma vulnerabilidade ALTO (CVSS 7.5) que afeta Microsoft.ChakraCore.
- Chance de exploração nos próximos 30 dias (EPSS): 3.7%, maior que 89.7% das vulnerabilidades.
- Correção: atualize para 1.8.0 ou posterior.
Description
Microsoft ChakraCore allows an attacker to bypass Control Flow Guard (CFG) in conjunction with another vulnerability to run arbitrary code on a target system, due to how the Chakra scripting engine handles accessing memory, aka "Scripting Engine Security Feature Bypass".
NVD description
Microsoft ChakraCore allows an attacker to bypass Control Flow Guard (CFG) in conjunction with another vulnerability to run arbitrary code on a target system, due to how the Chakra scripting engine handles accessing memory, aka "Scripting Engine Security Feature Bypass".
Mais vulnerabilidades de Microsoft.ChakraCore
Ver tudo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free