Shawn Denbow

Researcher fromWindows Security Team

#21333of 60,401

14.6Total CVSS

Vulnerabilities · 2

High

2

Windows Server 2016

An elevation of privilege issue exists due to the improper handling of objects in memory by the Human Interface Device (HID) Parser Library driver. This allows attackers to affect the system.

ChakraCore allows remote code execution, due to how the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0876, CVE-2018-0889, CVE-2018-0893, and CVE-2018-0935.