← back
CVE-2018-0954

CVE-2018-0954

8Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 16%
exploitation probability
16%top 3% of all CVEs
observed exploitation
nono source reports it
A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability." This affects Internet Explorer 9, ChakraCore, Internet Explorer 11, Microsoft Edge, Internet Explorer 10. This CVE ID is unique from CVE-2018-0945, CVE-2018-0946, CVE-2018-0951, CVE-2018-0953, CVE-2018-0955, CVE-2018-1022, CVE-2018-8114, CVE-2018-8122, CVE-2018-8128, CVE-2018-8137, CVE-2018-8139.
Affected products
Microsoft · ChakraCoreMicrosoft · Internet Explorer 10Microsoft · Internet Explorer 11Microsoft · Internet Explorer 9Microsoft · Microsoft Edge
References
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0954http://www.securityfocus.com/bid/103991http://www.securitytracker.com/id/1040844