CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-8298

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore. This CVE ID is unique from CVE-2018-8242, CVE-2018-8283, CVE-2018-8287, CVE-2018-8288, CVE-2018-8291, CVE-2018-8296.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.89

EPSS Ranking 99.5%

CVSS Severity

CVSS v3 Score 7.5

CVSS v2 Score 7.6

Proposed Action

The ChakraCore scripting engine contains a type confusion vulnerability which can allow for remote code execution.

Ransomware Campaign

Unknown

References

Products affected by CVE-2018-8298

Microsoft » Chakracore » Version: N/A

cpe:2.3:a:microsoft:chakracore:-
Microsoft » Chakracore » Version: 1.10.0

cpe:2.3:a:microsoft:chakracore:1.10.0
Microsoft » Chakracore » Version: 1.2.0

cpe:2.3:a:microsoft:chakracore:1.2.0
Microsoft » Chakracore » Version: 1.2.0.0

cpe:2.3:a:microsoft:chakracore:1.2.0.0
Microsoft » Chakracore » Version: 1.2.1

cpe:2.3:a:microsoft:chakracore:1.2.1
Microsoft » Chakracore » Version: 1.2.2

cpe:2.3:a:microsoft:chakracore:1.2.2
Microsoft » Chakracore » Version: 1.2.3

cpe:2.3:a:microsoft:chakracore:1.2.3
Microsoft » Chakracore » Version: 1.3.0

cpe:2.3:a:microsoft:chakracore:1.3.0
Microsoft » Chakracore » Version: 1.3.1

cpe:2.3:a:microsoft:chakracore:1.3.1
Microsoft » Chakracore » Version: 1.3.2

cpe:2.3:a:microsoft:chakracore:1.3.2
Microsoft » Chakracore » Version: 1.4.0

cpe:2.3:a:microsoft:chakracore:1.4.0
Microsoft » Chakracore » Version: 1.4.1

cpe:2.3:a:microsoft:chakracore:1.4.1
Microsoft » Chakracore » Version: 1.4.2

cpe:2.3:a:microsoft:chakracore:1.4.2
Microsoft » Chakracore » Version: 1.4.3

cpe:2.3:a:microsoft:chakracore:1.4.3
Microsoft » Chakracore » Version: 1.4.4

cpe:2.3:a:microsoft:chakracore:1.4.4
Microsoft » Chakracore » Version: 1.4.5

cpe:2.3:a:microsoft:chakracore:1.4.5
Microsoft » Chakracore » Version: 1.5.0

cpe:2.3:a:microsoft:chakracore:1.5.0
Microsoft » Chakracore » Version: 1.5.1

cpe:2.3:a:microsoft:chakracore:1.5.1
Microsoft » Chakracore » Version: 1.5.2

cpe:2.3:a:microsoft:chakracore:1.5.2
Microsoft » Chakracore » Version: 1.5.3

cpe:2.3:a:microsoft:chakracore:1.5.3
Microsoft » Chakracore » Version: 1.6.0

cpe:2.3:a:microsoft:chakracore:1.6.0
Microsoft » Chakracore » Version: 1.6.1

cpe:2.3:a:microsoft:chakracore:1.6.1
Microsoft » Chakracore » Version: 1.6.2

cpe:2.3:a:microsoft:chakracore:1.6.2
Microsoft » Chakracore » Version: 1.7.0

cpe:2.3:a:microsoft:chakracore:1.7.0
Microsoft » Chakracore » Version: 1.7.1

cpe:2.3:a:microsoft:chakracore:1.7.1
Microsoft » Chakracore » Version: 1.7.2

cpe:2.3:a:microsoft:chakracore:1.7.2
Microsoft » Chakracore » Version: 1.7.3

cpe:2.3:a:microsoft:chakracore:1.7.3
Microsoft » Chakracore » Version: 1.7.4

cpe:2.3:a:microsoft:chakracore:1.7.4
Microsoft » Chakracore » Version: 1.7.5

cpe:2.3:a:microsoft:chakracore:1.7.5
Microsoft » Chakracore » Version: 1.7.6

cpe:2.3:a:microsoft:chakracore:1.7.6
Microsoft » Chakracore » Version: 1.8.0

cpe:2.3:a:microsoft:chakracore:1.8.0
Microsoft » Chakracore » Version: 1.8.1

cpe:2.3:a:microsoft:chakracore:1.8.1
Microsoft » Chakracore » Version: 1.8.2

cpe:2.3:a:microsoft:chakracore:1.8.2
Microsoft » Chakracore » Version: 1.8.3

cpe:2.3:a:microsoft:chakracore:1.8.3
Microsoft » Chakracore » Version: 1.8.4

cpe:2.3:a:microsoft:chakracore:1.8.4
Microsoft » Chakracore » Version: 1.8.5

cpe:2.3:a:microsoft:chakracore:1.8.5

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-8298

Products

Pricing

Contact Us