CVE-2018-8145

HIGH 7.5EPSS 66.6%

An information disclosure vulnerability exists when Chakra improperly discloses the contents of its memory, which could provide an attacker with information to further compromise the user's computer or data, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge, Internet Explorer 10. This CVE ID is unique from CVE-2018-0943, CVE-2018-8130, CVE-2018-8133, CVE-2018-8177.

Affected: Microsoft · ChakraCore · Internet Explorer 11 · Microsoft Edge · Internet Explorer 10
CVSS v3.0 NVD: 7.5 HIGHCVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v2.0 NVD: 7.6 HIGHAV:N/AC:H/Au:N/C:C/I:C/A:C
EPSS: 66.64% chance of exploitation in the next 30 days, 99th percentile
Published: 2018-05-09
Updated: 2024-08-05

ExploitDB entries (1)

https://www.exploit-db.com/exploits/45011

Security advisories

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8145
http://www.securityfocus.com/bid/103986
http://www.securitytracker.com/id/1040844
advisories/GHSA-xphq-3x6q-q2qq

References

CVE Record
NVD entry