CVE-2018-0858

CVE-2018-0858: vulnerability in Microsoft Corporation ChakraCore

Published · Updated

Follow this CVE+ Monitor ChakraCore+ Monitor Microsoft.ChakraCore

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

8Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 15%
ChakraCore allows remote code execution, due to how the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0834, CVE-2018-0835, CVE-2018-0836, CVE-2018-0837, CVE-2018-0838, CVE-2018-0840, CVE-2018-0856, CVE-2018-0857, CVE-2018-0859, CVE-2018-0860, CVE-2018-0861, and CVE-2018-0866.
Affected products
Microsoft Corporation · ChakraCore
Related CVEs — Microsoft Corporation ChakraCore

In the same product, most dangerous first.

CVE-2017-8658—CVE-2017-8658EPSS 20.1%CVE-2018-0925—CVE-2018-0925EPSS 11.4%CVE-2017-11767—CVE-2017-11767EPSS 9.5%CVE-2017-11916—CVE-2017-11916EPSS 6.2%CVE-2017-11797—CVE-2017-11797EPSS 5.8%CVE-2017-11801—CVE-2017-11801EPSS 5.8%