CVE-2018-8391

CVSS 3.0: 7.5 high
EPSS: 11%p96
Published: Sep 13, 2018 · Sep 13, 2018
Modified: Jun 17, 2026

Analyze CVE-2018-8391 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore. This CVE ID is unique from CVE-2018-8354, CVE-2018-8456, CVE-2018-8457, CVE-2018-8459.

Vendors: microsoft

Products: chakracore

Weakness: CWE-787

Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (11.0%)

In the news

1 story

Microsoft Patch Tuesday

Cisco TalosSep 11, 18:56 UTC · Sep 11, 2018VulnerabilityCVE-2018-0965 CVE-2018-8367 CVE-2018-8420+262 · 1 read