CVE-2018-8372

CVE-2018-8372: falha em Microsoft ChakraCore

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Microsoft Edge+ Monitorar ChakraCore

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

8Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 26%
A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge. This CVE ID is unique from CVE-2018-8353, CVE-2018-8355, CVE-2018-8359, CVE-2018-8371, CVE-2018-8373, CVE-2018-8385, CVE-2018-8389, CVE-2018-8390.
Produtos afetados
Microsoft · ChakraCoreMicrosoft · Internet Explorer 11Microsoft · Microsoft Edge
CVEs relacionadas — Microsoft ChakraCore

No mesmo produto, das mais perigosas para as menos.

CVE-2020-0674HIGHCVE-2020-0674EPSS 86.9%KEVCVE-2019-0752HIGHCVE-2019-0752EPSS 81.7%KEVCVE-2021-26411HIGHInternet Explorer Memory Corruption VulnerabilityEPSS 81.7%KEVCVE-2019-1429HIGHCVE-2019-1429EPSS 77.3%KEVCVE-2018-8298HIGHCVE-2018-8298EPSS 74.7%KEVCVE-2018-8373HIGHCVE-2018-8373EPSS 61.8%KEV