CVE-2018-8500 — Out-of-bounds Write in Microsoft Chakracore

CWE-787 — Out-of-bounds WriteCWE-399CWE-269 — Improper Privilege Management7 documents6 sources
Severity
9.8CRITICALNVD
EPSS
32.9%
top 3.11%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Microsoft Chakracore
Timeline
PublishedOct 10
Latest updateMay 13

Description

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages1 packages

▶CVEListV5microsoft/chakracoreChakraCore

Patches

Patch: portal.msrc.microsoft.com ↗Patch: portal.msrc.microsoft.com ↗

🔴Vulnerability Details

3
GHSA
ChakraCore RCE Vulnerability↗2022-05-13
▶
OSV
ChakraCore RCE Vulnerability↗2022-05-13
▶
CVEList
CVE-2018-8500: A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory C↗2018-10-10
▶

📋Vendor Advisories

3
Microsoft
Scripting Engine Memory Corruption Vulnerability↗2018-10-09
▶
Cisco
Cisco Wireless LAN Controller IP Fragment Reassembly Denial of Service Vulnerability↗2018-05-02
▶
Cisco
Cisco 5500 and 8500 Series Wireless LAN Controller Information Disclosure Vulnerability↗2018-05-02
▶
CVE-2018-8500 — Out-of-bounds Write in Microsoft | cvebase