Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2018-0946 — Out-of-bounds Write in Microsoft Chakracore

CWE-787 — Out-of-bounds WriteCWE-125 — Out-of-bounds Read58 documents11 sources
Severity
7.5HIGHNVD
EPSS
63.6%
top 1.58%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
6
Microsoft ChakracoreMicrosoft Internet Explorer 10Microsoft Internet Explorer 11+3 more
Timeline
PublishedMay 9
Latest updateMay 13

Description

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-0945, CVE-2018-0951, CVE-2018-0953, CVE-2018-0954, CVE-2018-0955, CVE-2018-1022, CVE-2018-8114, CVE-2018-8122, CVE-2018-8128, CVE-2018-8137, CVE-2018-8139.

CVSS vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.6 | Impact: 5.9

Affected Packages7 packages

▶CVEListV5microsoft/microsoft_edge11 versions+10
▶CVEListV5microsoft/chakracoreChakraCore
▶CVEListV5microsoft/internet_explorer_9Windows Server 2008 for 32-bit Systems Service Pack 2, Windows Server 2008 for x64-based Systems Service Pack 2+1

Patches

Patch: portal.msrc.microsoft.com ↗Patch: portal.msrc.microsoft.com ↗

🔴Vulnerability Details

34
OSV
ChakraCore RCE Vulnerability↗2022-05-13
▶
GHSA
ChakraCore RCE Vulnerability↗2022-05-13
▶
GHSA
GHSA-62p4-hcq9-29cq: A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scripting Engine M↗2022-05-13
▶
OSV
ChakraCore RCE Vulnerability↗2022-05-13
▶
GHSA
GHSA-73gm-rwrw-qwv2: A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scripting Engine M↗2022-05-13
▶

💥Exploits & PoCs

1
Exploit-DB
Microsoft Edge Chakra - Cross Context Use-After-Free↗2018-05-25
▶

📋Vendor Advisories

1
Microsoft
Scripting Engine Memory Corruption Vulnerability↗2018-05-08
▶

🕵️Threat Intelligence

10
Fortinet
An Analysis of the DLL Address Leaking Trick used by the “Double Kill” Internet Explorer Zero-Day exploit (CVE-2018-8174)↗2018-08-06
▶
Fortinet
An Analysis of the Use-After-Free Bug in the Microsoft Edge Chakra Engine (CVE-2018-0946)↗2018-06-28
▶
Fortinet
An Analysis of Microsoft Edge Chakra NewScObjectNoCtor Array Type Confusion (CVE-2018-0838)↗2018-05-18
▶
Trendmicro
Microsoft’s May Patch Tuesday Fixes Exploited Bugs↗2018-05-09
▶
Trendmicro
Microsoft’s May Patch Tuesday Fixes Exploited Bugs↗2018-05-09
▶
CVE-2018-0946 — Out-of-bounds Write in Microsoft | cvebase