CVE-2018-8372

CVE-2018-8372: vulnerability in Microsoft ChakraCore

Published · Updated

Follow this CVE+ Monitor Microsoft Edge+ Monitor ChakraCore

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

8Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 26%
A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge. This CVE ID is unique from CVE-2018-8353, CVE-2018-8355, CVE-2018-8359, CVE-2018-8371, CVE-2018-8373, CVE-2018-8385, CVE-2018-8389, CVE-2018-8390.
Affected products
Microsoft · ChakraCoreMicrosoft · Internet Explorer 11Microsoft · Microsoft Edge
Related CVEs — Microsoft ChakraCore

In the same product, most dangerous first.

CVE-2020-0674HIGHCVE-2020-0674EPSS 86.9%KEVCVE-2019-0752HIGHCVE-2019-0752EPSS 81.7%KEVCVE-2021-26411HIGHInternet Explorer Memory Corruption VulnerabilityEPSS 81.7%KEVCVE-2019-1429HIGHCVE-2019-1429EPSS 77.3%KEVCVE-2018-8298HIGHCVE-2018-8298EPSS 74.7%KEVCVE-2018-8373HIGHCVE-2018-8373EPSS 61.8%KEV