CVE-2018-8298

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2018-8298

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-8298.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2018-8298

Aliases

GHSA-wgw2-wwq8-c7wf

Published

2018-07-11T00:29:01Z

Modified

2026-08-27T08:14:49Z

Severity

7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H CVSS Calculator

Summary

[none]

Details

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore. This CVE ID is unique from CVE-2018-8242, CVE-2018-8283, CVE-2018-8287, CVE-2018-8288, CVE-2018-8291, CVE-2018-8296.

References

Affected packages

Git / github.com/chakra-core/ChakraCore

Affected ranges

Type

GIT

Repo

https://github.com/chakra-core/ChakraCore

Events

Introduced

Fixed

0f3f5bec000dc4751c9268af3b1ef91501e1851c

Database specific

Show details

{
    "cpe": "cpe:2.3:a:microsoft:chakracore:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "1.10.1"
        }
    ],
    "source": "CPE_RANGE"
}

Affected versions

v1.*

v1.10.0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-8298.json"

Git / github.com/chakra-core/chakracore