CVE-2018-8283
First published: Wed Jul 11 2018(Updated: )
A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore. This CVE ID is unique from CVE-2018-8242, CVE-2018-8287, CVE-2018-8288, CVE-2018-8291, CVE-2018-8296, CVE-2018-8298.
Credit: secure@microsoft.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| nuget/Microsoft.ChakraCore | <1.10.1 | 1.10.1 |
| Microsoft Chakra | <1.10.1 | |
| ChakraCore | <1.10.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://nvd.nist.gov/vuln/detail/CVE-2018-8283
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8283
- https://github.com/chakra-core/ChakraCore/pull/5444
- https://github.com/chakra-core/ChakraCore/commit/b2f092ea42744d569fd102e8dd85d5524269bdd0
- https://web.archive.org/web/20210125211350/http://www.securityfocus.com/bid/104633
- https://github.com/advisories/GHSA-ch84-pxpj-7hhm (Advisory)
- http://www.securityfocus.com/bid/104633
Frequently Asked Questions
What is the severity of CVE-2018-8283?
CVE-2018-8283 is classified as a critical remote code execution vulnerability.
How do I fix CVE-2018-8283?
To fix CVE-2018-8283, users should update Microsoft ChakraCore to version 1.10.1 or later.
Which versions of ChakraCore are affected by CVE-2018-8283?
CVE-2018-8283 affects all versions of ChakraCore prior to 1.10.1.
What is the impact of CVE-2018-8283?
The impact of CVE-2018-8283 includes potential remote code execution attacks that can compromise system security.
Is there a known exploit for CVE-2018-8283?
As of now, there are no publicly disclosed exploits for CVE-2018-8283.
- collector/github-advisory-latest
- alias/GHSA-ch84-pxpj-7hhm
- alias/CVE-2018-8283
- collector/github-advisory
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/severity
- agent/remedy
- agent/references
- agent/last-modified-date
- agent/description
- agent/first-publish-date
- agent/event
- agent/trending
- agent/source
- agent/author
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/softwarecombine
- agent/tags
- collector/nvd-cve
- package-manager/nuget
- vendor/microsoft
- canonical/microsoft chakra
- canonical/chakracore