PT-2018-18529 · Microsoft+2 · Chakracore+1

Yu Zhou · Publicado 2018-07-11 · Atualizado 2025-10-28 · CVE-2018-8283

OSV

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore. This CVE ID is unique from CVE-2018-8242, CVE-2018-8287, CVE-2018-8288, CVE-2018-8291, CVE-2018-8296, CVE-2018-8298.

Correção

Memory Corruption

Enumeração de Fraquezas

CWE-787

Identificadores relacionados

CVE-2018-8283

GHSA-CH84-PXPJ-7HHM

Produtos afetados

Chakracore

Microsoft.Chakracore

Referências · 10

• https://github.com/chakra-core/ChakraCore/pull/5444 · Nota
• https://github.com/chakra-core/ChakraCore/commit/b2f092ea42744d569fd102e8dd85d5524269bdd0 · Nota
• https://web.archive.org/web/20210125211350/http://securityfocus.com/bid/104633 · Nota
• https://osv.dev/vulnerability/GHSA-ch84-pxpj-7hhm · Aviso do Fabricante
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8283 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-8283 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-8283 · Aviso do Fabricante
• http://securityfocus.com/bid/104633 · Nota
• https://t.me/cveNotify/140659 · Publicação no Telegram
• https://t.me/cvenotify/117789 · Publicação no Telegram