CVE-2018-8380: High severity chakracore vulnerability

Q: What is the severity of CVE-2018-8380?

CVE-2018-8380 is classified as a critical remote code execution vulnerability.

Q: How do I fix CVE-2018-8380?

To address CVE-2018-8380, users should apply the latest security patches provided by Microsoft for Edge and ChakraCore.

Q: Which products are affected by CVE-2018-8380?

CVE-2018-8380 affects Microsoft Edge and ChakraCore versions up to 1.10.1.

Q: What is the impact of CVE-2018-8380?

Successful exploitation of CVE-2018-8380 allows an attacker to execute arbitrary code on the affected system.

Q: Is there a workaround for CVE-2018-8380?

Currently, there are no known workarounds for CVE-2018-8380 other than applying available security updates.

Published Aug 15, 2018

Updated

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8266, CVE-2018-8381, CVE-2018-8384.

Affected Software

4 affected componentsFixes available

nuget/Microsoft.ChakraCore<1.10.2

1.10.2

Microsoft ChakraCore<=1.10.1

Microsoft Edge

Microsoft Windows 10=1803

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8380

Event History

Aug 15, 2018

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

DescriptionWeakness

May 13, 2022

Advisory Published

01:20 AM

Frequently Asked Questions

What is the severity of CVE-2018-8380?

CVE-2018-8380 is classified as a critical remote code execution vulnerability.

How do I fix CVE-2018-8380?