CVE-2018-8283

high · 7.5

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore. This CVE ID is unique from CVE-2018-8242, CVE-2018-8287, CVE-2018-8288, CVE-2018-8291, CVE-2018-8296, CVE-2018-8298.

7.5

CVSS

14.7%

EPSS (exploit prob.)

97th

EPSS percentile

2018-07-11

Published

CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Weaknesses

CWE-787

Affected products

Vendor	Product	Affected versions
microsoft	chakracore	< 1.10.1

Check a specific version with /api/v1/cve/match.

References

http://www.securityfocus.com/bid/104633
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8283
http://www.securityfocus.com/bid/104633
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8283

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2018-8283