CVE-2018-0943
First published: Wed May 09 2018(Updated: )
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8130, CVE-2018-8133, CVE-2018-8145, CVE-2018-8177.
Credit: secure@microsoft.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| nuget/Microsoft.ChakraCore | <1.8.4 | 1.8.4 |
| Microsoft Edge Beta | ||
| ChakraCore | <=1.8.3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://nvd.nist.gov/vuln/detail/CVE-2018-0943
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0943
- https://github.com/chakra-core/ChakraCore/commit/32ee5de20ce5b5c9332044039fea07616d76469d
- https://web.archive.org/web/20210419155416/https://www.securityfocus.com/bid/103980
- https://web.archive.org/web/20211204185256/https://www.securitytracker.com/id/1040844
- https://github.com/advisories/GHSA-7724-427r-8rvm (Advisory)
- http://www.securityfocus.com/bid/103980
- http://www.securitytracker.com/id/1040844
Frequently Asked Questions
What is the severity of CVE-2018-0943?
CVE-2018-0943 has a critical severity rating, indicating a significant risk of remote code execution.
How do I fix CVE-2018-0943?
To fix CVE-2018-0943, update Microsoft Edge to the latest version or upgrade to Microsoft.ChakraCore version 1.8.4 or above.
What systems are affected by CVE-2018-0943?
CVE-2018-0943 affects Microsoft Edge and versions of the ChakraCore scripting engine up to 1.8.3.
Can CVE-2018-0943 be exploited remotely?
Yes, CVE-2018-0943 can be exploited remotely, allowing attackers to execute arbitrary code on the affected systems.
What is the impact of CVE-2018-0943 on my system?
The impact of CVE-2018-0943 includes potential full system compromise and unauthorized access to sensitive information.
- collector/github-advisory-latest
- alias/GHSA-7724-427r-8rvm
- alias/CVE-2018-0943
- collector/github-advisory
- agent/references
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/weakness
- agent/severity
- agent/remedy
- agent/description
- agent/first-publish-date
- agent/event
- agent/trending
- agent/source
- agent/author
- agent/tags
- agent/softwarecombine
- collector/nvd-cve
- agent/software-canonical-lookup-request
- collector/nvd-index
- package-manager/nuget
- vendor/microsoft
- canonical/microsoft edge beta
- canonical/chakracore
- version/chakracore/1.8.3