CVE-2018-0856

CVE-2018-0856: vulnerability in Microsoft Edge, ChakraCore

Published · Updated

Follow this CVE+ Monitor Microsoft Edge+ Monitor ChakraCore

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

8Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 15%
Microsoft Edge and ChakraCore in Microsoft Windows 10 1703 and 1709 allows remote code execution, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0834, CVE-2018-0835, CVE-2018-0836, CVE-2018-0837, CVE-2018-0838, CVE-2018-0840, CVE-2018-0857, CVE-2018-0858, CVE-2018-0859, CVE-2018-0860, CVE-2018-0861, and CVE-2018-0866.
Affected products
Microsoft Corporation · Microsoft Edge, ChakraCore
Related CVEs — Microsoft Edge, ChakraCore

In the same product, most dangerous first.

CVE-2018-0860—CVE-2018-0860EPSS 68.4%CVE-2018-0835—CVE-2018-0835EPSS 65.3%CVE-2018-0838—CVE-2018-0838EPSS 65.3%CVE-2018-0837—CVE-2018-0837EPSS 65.3%CVE-2018-0834—CVE-2018-0834EPSS 55.2%CVE-2018-0859—CVE-2018-0859EPSS 17.7%