CVE-2018-0800: Infoleak

Published Jan 4, 2018
·
Updated

Microsoft Edge in Microsoft Windows 10 1709 allows an attacker to obtain information to further compromise the user's system, due to how the scripting engine handles objects in memory, aka "Scripting Engine Information Disclosure Vulnerability". This CVE ID is unique from CVE-2018-0767 and CVE-2018-0780.

Affected Software

3 affected components
Microsoft ChakraCore<=1.7.6
Microsoft Edge
Microsoft Windows 10=1709

Event History

Jan 4, 2018
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
DescriptionWeakness

Frequently Asked Questions

1

What is the severity of CVE-2018-0800?

CVE-2018-0800 has a severity rating of important as it allows for information disclosure.

2

How do I fix CVE-2018-0800?

To fix CVE-2018-0800, ensure that your Microsoft Edge and ChakraCore are updated to the latest versions.

3

Which software is affected by CVE-2018-0800?

CVE-2018-0800 affects Microsoft Edge and versions of ChakraCore up to 1.7.6 on Windows 10 1709.

4

Can CVE-2018-0800 be exploited remotely?

Yes, CVE-2018-0800 can potentially be exploited remotely by an attacker.

5

What type of vulnerability is CVE-2018-0800?

CVE-2018-0800 is classified as an information disclosure vulnerability within the scripting engine.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203