CVE-2018-8500

CVSS 3.0: 9.8 critical
EPSS: 18%p97
Published: Oct 10, 2018 · Oct 10, 2018
Modified: Jun 17, 2026

Analyze CVE-2018-8500 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore.

Vendors: microsoft

Products: chakracore

Weakness: CWE-787

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (18.5%)

In the news

1 story

Microsoft Patch Tuesday — October 18: Vulnerability disclosures and Snort coverage

Cisco TalosOct 9, 18:38 UTC · Oct 9, 2018VulnerabilityCVE-2018-8491 CVE-2018-8460 CVE-2018-8509+262 · 1 read