Remote Code Execution Vulnerability in Microsoft Browsers and ChakraCore
CVE-2018-8288
7.5HIGH
Key Information:
- Vendor
- Microsoft
- Vendor
- CVE Published:
- 11 July 2018
Summary
A remote code execution vulnerability arises from the scripting engine's mishandling of objects in memory within Microsoft browsers. This flaw can potentially allow an attacker to execute arbitrary code on a victim's system. Attackers could craft malicious web content that, when opened in an affected browser, may facilitate the execution of unwanted code, leading to serious security implications. Users should ensure their systems are updated with the latest patches to mitigate potential exploits.
Affected Version(s)
ChakraCore ChakraCore
Internet Explorer 11 Windows 10 for 32-bit Systems
Internet Explorer 11 Windows 10 for x64-based Systems
References
EPSS Score
93% chance of being exploited in the next 30 days.
CVSS V3.1
Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved