Remote Code Execution Vulnerability in Microsoft Browsers and ChakraCore
CVE-2018-8288

7.5HIGH

Key Information:

Vendor
Microsoft
Vendor
CVE Published:
11 July 2018

Summary

A remote code execution vulnerability arises from the scripting engine's mishandling of objects in memory within Microsoft browsers. This flaw can potentially allow an attacker to execute arbitrary code on a victim's system. Attackers could craft malicious web content that, when opened in an affected browser, may facilitate the execution of unwanted code, leading to serious security implications. Users should ensure their systems are updated with the latest patches to mitigate potential exploits.

Affected Version(s)

ChakraCore ChakraCore

Internet Explorer 11 Windows 10 for 32-bit Systems

Internet Explorer 11 Windows 10 for x64-based Systems

References

EPSS Score

93% chance of being exploited in the next 30 days.

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.