CVE-2018-8390: High severity chakracore vulnerability

Q: What is the severity of CVE-2018-8390?

CVE-2018-8390 is rated as critical due to the potential for remote code execution.

Q: What products are affected by CVE-2018-8390?

CVE-2018-8390 affects Microsoft Edge and versions of the ChakraCore scripting engine up to 1.10.1.

Q: How do I fix CVE-2018-8390?

To fix CVE-2018-8390, ensure that Microsoft Edge and ChakraCore are updated to their latest versions.

Q: What type of vulnerability is CVE-2018-8390?

CVE-2018-8390 is classified as a remote code execution vulnerability caused by memory corruption in the scripting engine.

Q: Can CVE-2018-8390 be exploited?

Yes, CVE-2018-8390 can be exploited by an attacker to execute arbitrary code on the target system.

Published Aug 15, 2018

Updated

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8353, CVE-2018-8355, CVE-2018-8359, CVE-2018-8371, CVE-2018-8372, CVE-2018-8373, CVE-2018-8385, CVE-2018-8389.

Affected Software

6 affected componentsFixes available

nuget/Microsoft.ChakraCore<1.10.2

1.10.2

Microsoft ChakraCore<=1.10.1

Microsoft Edge

Microsoft Windows 10=1703

Microsoft Windows 10=1709

Microsoft Windows 10=1803

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8390

Event History

Aug 15, 2018

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

DescriptionWeakness

May 13, 2022

Advisory Published

01:20 AM

Frequently Asked Questions

What is the severity of CVE-2018-8390?

CVE-2018-8390 is rated as critical due to the potential for remote code execution.

What products are affected by CVE-2018-8390?