CVE-2018-8500
Critical · 9.8CVSS
9.8
EPSS
18.5%
Published
Oct 10, 2018
CISA due date
—
The record
A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| NuGet | Microsoft.ChakraCore | 0 | 1.11.2 |
Related vulnerabilities
- CVE-2019-0639 A remote code execution vulnerability exists in the way that the ChakraCore scripting… Also affects Microsoft.ChakraCore
- CVE-2019-0568 A remote code execution vulnerability exists in the way that the Chakra scripting engine… Also affects Microsoft.ChakraCore
- CVE-2019-0567 A remote code execution vulnerability exists in the way that the Chakra scripting engine… Also affects Microsoft.ChakraCore
- CVE-2019-0539 A remote code execution vulnerability exists in the way that the Chakra scripting engine… Also affects Microsoft.ChakraCore
- CVE-2018-8624 A remote code execution vulnerability exists in the way that the Chakra scripting engine… Also affects Microsoft.ChakraCore
- CVE-2018-8618 A remote code execution vulnerability exists in the way that the Chakra scripting engine… Also affects Microsoft.ChakraCore
- CVE-2018-8617 A remote code execution vulnerability exists in the way that the Chakra scripting engine… Also affects Microsoft.ChakraCore
- CVE-2018-8629 A remote code execution vulnerability exists in the way that the Chakra scripting engine… Also affects Microsoft.ChakraCore