CVE-2018-8267
published 2018-06-14CVE-2018-8267: A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripting Engine Memory…
PriorityP274high7.5CVSS 3.0
AVNACHPRNUIRSUCHIHAH
ITWVulnCheck KEV
Exploited in the wild
EPSS
15.82%
96.5th percentile
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripting Engine Memory Corruption Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10. This CVE ID is unique from CVE-2018-8243.
Affected
27 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| microsoft | internet_explorer | — | — |
| microsoft | internet_explorer | — | — |
| microsoft | internet_explorer | — | — |
| microsoft | internet_explorer_10 | — | — |
| microsoft | internet_explorer_11 | — | — |
| microsoft | internet_explorer_11 | — | — |
| microsoft | internet_explorer_11 | — | — |
| microsoft | internet_explorer_11 | — | — |
| microsoft | internet_explorer_11 | — | — |
| microsoft | internet_explorer_11 | — | — |
| microsoft | internet_explorer_11 | — | — |
| microsoft | internet_explorer_11 | — | — |
| microsoft | internet_explorer_11 | — | — |
| microsoft | internet_explorer_11 | — | — |
| microsoft | internet_explorer_11 | — | — |
| microsoft | internet_explorer_11 | — | — |
| microsoft | internet_explorer_11 | — | — |
| microsoft | internet_explorer_11 | — | — |
| microsoft | internet_explorer_11 | — | — |
| microsoft | internet_explorer_11 | — | — |
| microsoft | internet_explorer_11 | — | — |
| microsoft | internet_explorer_11 | — | — |
| microsoft | internet_explorer_9 | — | — |
| microsoft | internet_explorer_9 | — | — |
| msrc | internet_explorer_10 | — | — |
Detection & IOCsextracted from sources · hover to see the quote
- →Attack vector is web-based: attacker hosts a specially crafted website exploitable through Internet Explorer, or embeds a malicious ActiveX control marked 'safe for initialization' in an application or Office document hosting the IE rendering engine. ↗
- →Compromised websites or sites hosting user-provided content/advertisements are also a delivery vector for this IE scripting engine exploit. ↗
- →Microsoft's own exploit assessment rates exploitation as 'More Likely' for both latest and older software releases, indicating active exploitation risk should be treated as elevated. ↗
- ·The vulnerability affects the Microsoft Scripting Engine as used in Internet Explorer; exploitation requires the victim to browse to a malicious page or open a crafted Office/application document hosting the IE rendering engine. ↗
- ·Exploitation impact is bounded by the current user's privilege level; administrative users face full system compromise, while standard users face limited but still significant code execution risk. ↗
CVSS provenance
nvdv3.07.5HIGHCVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
nvdv2.07.6HIGHAV:N/AC:H/Au:N/C:C/I:C/A:C
ghsa7.5HIGH
osv7.5HIGH
vulncheck7.5HIGH
vendor_msrc7.5HIGH
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
ChakraCore RCE Vulnerability
ghsa·2022-05-13·CVSS 7.5
CVE-2018-8243 [HIGH] CWE-787 ChakraCore RCE Vulnerability
ChakraCore RCE Vulnerability
A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore. This CVE ID is unique from CVE-2018-8267.
GHSA
GHSA-64mj-hjvf-q832: A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripting Engin
ghsa_unreviewed·2022-05-13·CVSS 7.5
CVE-2018-8267 [HIGH] CWE-787 GHSA-64mj-hjvf-q832: A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripting Engin
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripting Engine Memory Corruption Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10. This CVE ID is unique from CVE-2018-8243.
OSV
ChakraCore RCE Vulnerability
osv·2022-05-13·CVSS 7.5
CVE-2018-8243 [HIGH] ChakraCore RCE Vulnerability
ChakraCore RCE Vulnerability
A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore. This CVE ID is unique from CVE-2018-8267.
VulnCheck
Microsoft Internet Explorer Out-of-bounds Write
vulncheck·2018·CVSS 7.5
CVE-2018-8267 [HIGH] Microsoft Internet Explorer Out-of-bounds Write
Microsoft Internet Explorer Out-of-bounds Write
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripting Engine Memory Corruption Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10. This CVE ID is unique from CVE-2018-8243.
Affected: Microsoft Internet Explorer
Required Action: Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.
Exploitation References: https://dl.acm.org/doi/pdf/10.1145/3465481.3465758
Microsoft
Scripting Engine Memory Corruption Vulnerability
vendor_msrc·2018-06-12·CVSS 7.5
CVE-2018-8267 [HIGH] Scripting Engine Memory Corruption Vulnerability
Scripting Engine Memory Corruption Vulnerability
Description: A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.
In a web-based attack scenario, an attacker could host a specially crafted websi
No detection rules found.
No public exploits indexed.
Talos
Microsoft Patch Tuesday - June 2018
blogs_talos·2018-06-12·CVSS 8.1
[HIGH] Microsoft Patch Tuesday - June 2018
## Executive SummaryMicrosoft has released its monthly set of security advisories for vulnerabilities that have been identified and addressed in various products. This month's advisory release addresses 50 flaws, with 11 of them rated "critical," and 39 rated "important." These vulnerabilities impact Microsoft Edge, Internet Explorer, Chakra Scripting Engine, Windows DNSAPI, Microsoft Office, Windows Kernel and more.
In addition to the 50 vulnerabilities referenced above, Microsoft has also released a critical update advisory, ADV180014, the June 2018 Adobe Flash Security Update, which addresses the vulnerabilities described in the security bulletin.
### Critical vulnerabilitiesThis month, Microsoft is addressing 11 vulnerabilities that are rated "critical." Talos believes these three vu
Krebs
Microsoft Patch Tuesday, June 2018 Edition
blogs_krebs·2018-06-12·CVSS 7.5
CVE-2018-8267 [HIGH] Microsoft Patch Tuesday, June 2018 Edition
Microsoft today pushed out a bevy of software updates to fix more than four dozen security holes in Windows and related software. Almost a quarter of the vulnerabilities addressed in this month’s patch batch earned Microsoft’s “critical” rating, meaning malware or miscreants can exploit the flaws to break into vulnerable systems without any help from users.
Most of the critical fixes are in Microsoft browsers or browser components. One of the flaws, CVE-2018-8267 , was publicly disclosed prior to today’s patch release, meaning attackers may have had a head start figuring out how to exploit the bug to attack Internet Explorer users.
According to Recorded Future , the most important patched vulnerability is a remote code execution vulnerability in the Windows Domain Name System (DNS), whic
Talos
Microsoft Patch Tuesday - June 2018
blogs_talos·2018-06-12·CVSS 8.1
[HIGH] Microsoft Patch Tuesday - June 2018
## Microsoft Patch Tuesday - June 2018
## Executive Summary Microsoft has released its monthly set of security advisories for vulnerabilities that have been identified and addressed in various products. This month's advisory release addresses 50 flaws, with 11 of them rated "critical," and 39 rated "important." These vulnerabilities impact Microsoft Edge, Internet Explorer, Chakra Scripting Engine, Windows DNSAPI, Microsoft Office, Windows Kernel and more.
In addition to the 50 vulnerabilities referenced above, Microsoft has also released a critical update advisory, ADV180014, the June 2018 Adobe Flash Security Update, which addresses the vulnerabilities described in the security bulletin.
## Critical vulnerabilities This month, Microsoft is addressing 11 vulnerabilities that are rated
Zscaler
Zscaler protects against 10 new vulnerabilities for Internet Explorer, Microsoft Edge, Microsoft Windows, ChakraCore, HIDParser and Media Foundation. | Zscaler
blogs_zscaler
Zscaler protects against 10 new vulnerabilities for Internet Explorer, Microsoft Edge, Microsoft Windows, ChakraCore, HIDParser and Media Foundation. | Zscaler
Provide users with seamless, secure, reliable access to applications and data.
Build and run secure cloud apps, enable zero trust cloud connectivity, and protect workloads from data center to cloud.
Provide zero trust connectivity for IoT and OT devices and secure remote access to OT systems.
Provide zero trust site-to-site connectivity and reliable access to B2B apps for partners.
Industry Report
Zscaler: A Leader in the 2025 Gartner® Magic Quadrant™ for Security Service Edge (SSE)
USE CASES
INDUSTRY & MARKET SOLUTIONS
PARTNERS
TECHNOLOGY PARTNERS
Resource Center
Events & Trainings
Security Research & Services
Tools
Community & Support
CXO REVOLUTIONARIES
Amplifying the voices of real-world digital and zero trust pioneers
Discover how it began and where it’s going
Meet o
http://www.securityfocus.com/bid/104404http://www.securitytracker.com/id/1041099https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8267http://www.securityfocus.com/bid/104404http://www.securitytracker.com/id/1041099https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8267
2018-06-14
Published
Exploited in the wild