CVE-2018-0925: High severity microsoft chakra vulnerability
Published Mar 14, 2018
·Updated
ChakraCore allows remote code execution, due to how the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0876, CVE-2018-0889, CVE-2018-0893, and CVE-2018-0935.
Affected Software
2 affected componentsFixes available
nuget/Microsoft.ChakraCore<1.8.2
1.8.2
Microsoft ChakraCore
Remediation
Event History
Mar 14, 2018
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
DescriptionWeakness
May 13, 2022
Advisory Published
01:18 AM
Frequently Asked Questions
1
What is the severity of CVE-2018-0925?
CVE-2018-0925 has been rated as critical due to its potential for remote code execution.
2
How do I fix CVE-2018-0925?
To fix CVE-2018-0925, you should upgrade Microsoft ChakraCore to version 1.8.2 or later.
3
What causes CVE-2018-0925?
CVE-2018-0925 is caused by memory corruption in the ChakraCore scripting engine when handling objects.
4
Which software is affected by CVE-2018-0925?
CVE-2018-0925 affects Microsoft ChakraCore versions prior to 1.8.2.
5
Can CVE-2018-0925 be exploited remotely?
Yes, CVE-2018-0925 can be exploited remotely, enabling attackers to execute arbitrary code.