CVE-2018-0781: High severity Microsoft ChakraCore vulnerability

Q: What is the severity of CVE-2018-0781?

CVE-2018-0781 is considered a critical vulnerability that allows arbitrary code execution.

Q: How do I fix CVE-2018-0781?

To fix CVE-2018-0781, update Microsoft Edge and associated software to the latest version provided by Microsoft.

Q: What versions of Microsoft Edge are affected by CVE-2018-0781?

CVE-2018-0781 affects various versions of Microsoft Edge prior to the latest security updates.

Q: What operating systems are vulnerable to CVE-2018-0781?

CVE-2018-0781 affects Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016.

Q: What type of vulnerability is CVE-2018-0781?

CVE-2018-0781 is classified as a Scripting Engine Memory Corruption Vulnerability.

Published Jan 4, 2018

Updated

Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0758, CVE-2018-0762, CVE-2018-0768, CVE-2018-0769, CVE-2018-0770, CVE-2018-0772, CVE-2018-0773, CVE-2018-0774, CVE-2018-0775, CVE-2018-0776, CVE-2018-0777, and CVE-2018-0778.

Affected Software

8 affected components

Microsoft ChakraCore<1.7.6

Microsoft Edge

Microsoft Windows 10

Microsoft Windows 10=1511

Microsoft Windows 10=1607

Microsoft Windows 10=1703

Microsoft Windows 10=1709

Microsoft Windows Server 2016

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0781

Event History

Jan 4, 2018

CVE Published

via MITRE·02:00 PM

Data Sourced

via MITRE·02:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2018-0781?

CVE-2018-0781 is considered a critical vulnerability that allows arbitrary code execution.

How do I fix CVE-2018-0781?