CVE-2018-1023

CVSS 3.0: 7.5 high
EPSS: 15%p97
Published: Apr 12, 2018 · Apr 12, 2018
Modified: Jun 17, 2026

Analyze CVE-2018-1023 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory, aka "Microsoft Browser Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore.

Vendors: microsoft

Products: chakracore, edge

Weakness: CWE-787

Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (15.2%)

In the news

1 story

Microsoft Patch Tuesday

Cisco TalosApr 10, 20:13 UTC · Apr 10, 2018VulnerabilityCVE-2018-0870 CVE-2018-0959 CVE-2018-0979+432 · 1 read