CVE-2018-8456: High severity chakracore vulnerability

Q: What is the severity of CVE-2018-8456?

CVE-2018-8456 has a severity rating of critical, indicating a high risk of impact.

Q: How do I fix CVE-2018-8456?

To fix CVE-2018-8456, update Microsoft Edge and ChakraCore to the latest versions released by Microsoft.

Q: Which applications are affected by CVE-2018-8456?

CVE-2018-8456 affects Microsoft Edge and versions of ChakraCore up to 1.10.1.

Q: Can CVE-2018-8456 lead to remote code execution?

Yes, CVE-2018-8456 can lead to remote code execution if exploited by an attacker.

Q: Is CVE-2018-8456 specific to certain versions of Windows?

CVE-2018-8456 is not specific to Windows versions, but the affected software must be present on the system.

Published Sep 13, 2018

Updated

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8354, CVE-2018-8391, CVE-2018-8457, CVE-2018-8459.

Affected Software

6 affected componentsFixes available

nuget/Microsoft.ChakraCore<1.11.1

1.11.1

Microsoft ChakraCore<=1.10.1

Microsoft Edge

Microsoft Windows 10=1703

Microsoft Windows 10=1709

Microsoft Windows 10=1803

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8456

Event History

Sep 13, 2018

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionWeakness

May 13, 2022

Advisory Published

01:20 AM

Frequently Asked Questions

What is the severity of CVE-2018-8456?

CVE-2018-8456 has a severity rating of critical, indicating a high risk of impact.

How do I fix CVE-2018-8456?