CVE-2018-8391

high · 7.5

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore. This CVE ID is unique from CVE-2018-8354, CVE-2018-8456, CVE-2018-8457, CVE-2018-8459.

7.5

CVSS

11.0%

EPSS (exploit prob.)

96th

EPSS percentile

2018-09-13

Published

CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Weaknesses

CWE-787

Affected products

Vendor	Product	Affected versions
microsoft	chakracore	all versions

Check a specific version with /api/v1/cve/match.

References

http://www.securityfocus.com/bid/105231
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8391
http://www.securityfocus.com/bid/105231
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8391

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2018-8391