CVE-2018-8280

Опубликовано: 11 июл. 2018

Источник: nvd

CVSS3: 7.5

CVSS2: 7.6

EPSS Средний

Описание

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8286, CVE-2018-8290, CVE-2018-8294.

Ссылки

http://www.securityfocus.com/bid/104642
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1041256
Third Party Advisory
VDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8280
Patch
Vendor Advisory
http://www.securityfocus.com/bid/104642
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1041256
Third Party Advisory
VDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8280
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*

Одно из

cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*

Конфигурация 2

cpe:2.3:a:microsoft:chakracore:*:*:*:*:*:*:*:*

Версия до 1.10.0 (включая)

EPSS

Процентиль: 96%

0.29136

Средний

7.5 High

CVSS3

7.6 High

CVSS2

Дефекты

CWE-787

Связанные уязвимости

CVE-2018-8280

CVSS3: 4.2

msrc

около 7 лет назад

Chakra Scripting Engine Memory Corruption Vulnerability

GHSA-wwm6-r38h-ppg7