Vulnerability Details CVE-2018-1023
A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory, aka "Microsoft Browser Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.156
EPSS Ranking 94.4%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 7.6
References
- http://www.securityfocus.com/bid/103606
- http://www.securitytracker.com/id/1040650
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-1023
- http://www.securityfocus.com/bid/103606
- http://www.securitytracker.com/id/1040650
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-1023
Products affected by CVE-2018-1023
-
cpe:2.3:a:microsoft:chakracore:-
-
cpe:2.3:a:microsoft:edge:-
-
cpe:2.3:o:microsoft:windows_10:-
-
cpe:2.3:o:microsoft:windows_10:1511
-
cpe:2.3:o:microsoft:windows_10:1607
-
cpe:2.3:o:microsoft:windows_10:1703
-
cpe:2.3:o:microsoft:windows_10:1709
-
cpe:2.3:o:microsoft:windows_server_2016:-