ChakraCore RCE Vulnerability

GHSA-wjmf-6x7g-xq67 · CVE-2018-1022

Published May 13, 2022 · Modified Feb 16, 2024

Description

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge. This CVE ID is unique from CVE-2018-0945, CVE-2018-0946, CVE-2018-0951, CVE-2018-0953, CVE-2018-0954, CVE-2018-0955, CVE-2018-8114, CVE-2018-8122, CVE-2018-8128, CVE-2018-8137, CVE-2018-8139.

References

ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2018-1022
WEB https://github.com/chakra-core/ChakraCore/commit/28928cba24968ed11022608f466c4ccc3470e64d
PACKAGE https://github.com/chakra-core/ChakraCore
WEB https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-1022
WEB https://web.archive.org/web/20210124164250/http://www.securityfocus.com/bid/103978
WEB https://web.archive.org/web/20211204185256/http://www.securitytracker.com/id/1040844

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes