PT-2018-18529 · Microsoft+2 · Chakracore+1

Yu Zhou · Published 2018-07-11 · Updated 2025-10-28 · CVE-2018-8283

OSV

CVSS v3.1

7.5

High

Base vector

AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore. This CVE ID is unique from CVE-2018-8242, CVE-2018-8287, CVE-2018-8288, CVE-2018-8291, CVE-2018-8296, CVE-2018-8298.

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2018-8283

GHSA-CH84-PXPJ-7HHM

Affected Products

Chakracore

Microsoft.Chakracore

References · 10

• https://osv.dev/vulnerability/GHSA-ch84-pxpj-7hhm · Vendor Advisory
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8283 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-8283 · Security Note
• https://osv.dev/vulnerability/CVE-2018-8283 · Vendor Advisory
• https://github.com/chakra-core/ChakraCore/pull/5444 · Note
• https://github.com/chakra-core/ChakraCore/commit/b2f092ea42744d569fd102e8dd85d5524269bdd0 · Note
• https://web.archive.org/web/20210125211350/http://securityfocus.com/bid/104633 · Note
• http://securityfocus.com/bid/104633 · Note
• https://t.me/cveNotify/140659 · Telegram Post
• https://t.me/cvenotify/117789 · Telegram Post