PT-2018-2018

CVE-2018-8298

Published

2018-07-10

Updated

2025-10-28

Description by

CVSS 2.0

7.6

High

MetricsAV:N/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions ChakraCore (affected versions not specified)

Description The issue is related to a type confusion vulnerability in the ChakraCore Scripting Engine, which is associated with errors in the mechanisms for processing objects in memory. Exploitation of this issue may allow a remote attacker to execute arbitrary code with the privileges of the current user.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploitability

Exploit

Impacts

Vendors

Affected products

Weakness enumeration

CWE-843: Access of Resource Using Incompatible Type (\'Type Confusion\')

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

Related identifiers

CVE-2018-8298

BDU:2018-01634