CVE-2018-0818

Microsoft ChakraCore allows an attacker to bypass Control Flow Guard (CFG) in conjunction with another vulnerability to run arbitrary code on a target system…

published January 10, 2018

CVSS
—
EPSS
4%
Percentile
89.6
In the wild
Unconfirmed
What it is

Microsoft ChakraCore allows an attacker to bypass Control Flow Guard (CFG) in conjunction with another vulnerability to run arbitrary code on a target system, due to how the Chakra scripting engine handles accessing memory, aka "Scripting Engine Security Feature Bypass".

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03686 · 89.6th percentile
Published
2018-01-10T01:00Z
EPSS history
Timeline
  • 10 JAN 01:00Z
    Microsoft ChakraCore allows an attacker to bypass Control Flow Guard (CFG) in conjunction with another vulnerability to run arbitrary code on a target system…
    cvelistv5