7.5
High
Exploited
CVE-2018-8298 ChakraCore Scripting Engine Type Confusion Vulnerability
Active exploitation observed
· CISA KEV catalogue
Required action
Apply updates per vendor instructions.
Ransomware campaigns
Not observed so far
Weakness
CWE-843
Description
A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore. This CVE ID is unique from CVE-2018-8242, CVE-2018-8283, CVE-2018-8287, CVE-2018-8288, CVE-2018-8291, CVE-2018-8296.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| ChakraCore | Versions not published |
References
- portal.msrc.microsoft.com portal.msrc.microsoft.com
- 104639 www.securityfocus.com
- 45217 www.exploit-db.com
Timeline
- Published
- Added to the KEV catalogue
- Last modified
Other CVEs of ChakraCore
The 187 CVEs of ChakraCore →
CVE-2021-42279
Chakra Scripting Engine Memory Corruption Vulnerability
4.2
Medium
CVE-2020-17131
Chakra Scripting Engine Memory Corruption Vulnerability
4.2
Medium
CVE-2020-17054
Chakra Scripting Engine Memory Corruption Vulnerability
4.2
Medium
CVE-2020-17048
Chakra Scripting Engine Memory Corruption Vulnerability
4.2
Medium