CVE-2018-0925

CVE-2018-0925: vulnerability in Microsoft Corporation ChakraCore

Published · Updated

Follow this CVE+ Monitor ChakraCore+ Monitor Microsoft.ChakraCore

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

8Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 11%
ChakraCore allows remote code execution, due to how the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0876, CVE-2018-0889, CVE-2018-0893, and CVE-2018-0935.
Affected products
Microsoft Corporation · ChakraCore
Related CVEs — Microsoft Corporation ChakraCore

In the same product, most dangerous first.

CVE-2017-8658—CVE-2017-8658EPSS 20.1%CVE-2018-0858—CVE-2018-0858EPSS 14.8%CVE-2017-11767—CVE-2017-11767EPSS 9.5%CVE-2017-11916—CVE-2017-11916EPSS 6.2%CVE-2017-11797—CVE-2017-11797EPSS 5.8%CVE-2017-11801—CVE-2017-11801EPSS 5.8%