CVE-2018-0946
35Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 51%
from disclosure to weapon16 days
Published on NVDMay 9
1st PoC+16d
exploitation probability
51%top 1% of all CVEs
observed exploitation
nono source reports it
2 public exploit(s)
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-0945, CVE-2018-0951, CVE-2018-0953, CVE-2018-0954, CVE-2018-0955, CVE-2018-1022, CVE-2018-8114, CVE-2018-8122, CVE-2018-8128, CVE-2018-8137, CVE-2018-8139.
public PoCs found — 2✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/44758cve_referencewww.exploit-db.com/exploits/44758/unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.