Back to feed
EUVD-2022-2580 · Published May 13, 2022
ChakraCore RCE Vulnerability A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8583, CVE-2018-8617, CVE-2018-8624, CVE-2018-8629.
Technologies
Microsoft Windows Server 2016Microsoft Windows 10Microsoft Windows Server 2019Microsoft EdgeMicrosoft ChakracoreMicrosoft.Chakracore Microsoft.Chakracore
Weaknesses
CWE-787
CVSS scores
- v3.07.5
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Initial Access
References
- http://www.securityfocus.com/bid/106113
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8618
- https://nvd.nist.gov/vuln/detail/CVE-2018-8618
- https://github.com/chakra-core/ChakraCore/pull/5869
- https://github.com/chakra-core/ChakraCore/commit/5db42187c3fd129c9574d61ceb7236d932bb69dc
- https://web.archive.org/web/20210124222845/http://www.securityfocus.com/bid/106113
Potentially impacted assets
See if this affects your attack surface
