CVSS: 7.6EPSS: 62%CPEs: 1EXPL: 1CVE-2018-8298 – ChakraCore Scripting Engine Type Confusion Vulnerability
https://notcve.org/view.php?id=CVE-2018-8298
A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore. This CVE ID is unique from CVE-2018-8242, CVE-2018-8283, CVE-2018-8287, CVE-2018-8288, CVE-2018-8291, CVE-2018-8296. Existe una vulnerabilidad de ejecución remota de código que se manifiesta en la forma en la que el motor de scripting ChakraCore gestiona los objetos en la memoria. Esto también se conoce como "Scripting Engine Memory Corruption Vulnerability". • https://www.exploit-db.com/exploits/45217 http://www.securityfocus.com/bid/104639 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8298 • CWE-843: Access of Resource Using Incompatible Type ('Type Confusion') •
CVSS: 7.6EPSS: 14%CPEs: 7EXPL: 0CVE-2018-8275 – Microsoft Chakra Array.splice Use-After-Free Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2018-8275
A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8125, CVE-2018-8262, CVE-2018-8274, CVE-2018-8279, CVE-2018-8301. Existe una vulnerabilidad de ejecución remota de código cuando Microsoft Edge accede incorrectamente a los objetos en la memoria. Esto también se conoce como "Microsoft Edge Memory Corruption Vulnerability". • http://www.securityfocus.com/bid/104632 http://www.securitytracker.com/id/1041256 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8275 • CWE-787: Out-of-bounds Write •
CVSS: 7.6EPSS: 20%CPEs: 22EXPL: 0CVE-2018-8287
https://notcve.org/view.php?id=CVE-2018-8287
A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge, Internet Explorer 10. This CVE ID is unique from CVE-2018-8242, CVE-2018-8283, CVE-2018-8288, CVE-2018-8291, CVE-2018-8296, CVE-2018-8298. Existe una vulnerabilidad de ejecución remota de código que se manifiesta en la forma en la que el motor de scripting gestiona los objetos en la memoria en los navegadores de Microsoft. Esto también se conoce como "Scripting Engine Memory Corruption Vulnerability". • http://www.securityfocus.com/bid/104634 http://www.securitytracker.com/id/1041256 http://www.securitytracker.com/id/1041258 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8287 • CWE-787: Out-of-bounds Write •
CVSS: 7.6EPSS: 94%CPEs: 8EXPL: 1CVE-2018-8229 – Microsoft Edge Chakra JIT - Type Confusion with Hoisted SetConcatStrMultiItemBE Instructions
https://notcve.org/view.php?id=CVE-2018-8229
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8227. Existe una vulnerabilidad de ejecución remota de código que se manifiesta en la forma en la que el motor de scripting de Chakra gestiona los objetos en la memoria en Microsoft Edge. Esto también se conoce como "Chakra Scripting Engine Memory Corruption Vulnerability". • https://www.exploit-db.com/exploits/45013 http://www.securityfocus.com/bid/104369 http://www.securitytracker.com/id/1041097 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8229 • CWE-843: Access of Resource Using Incompatible Type ('Type Confusion') •
CVSS: 7.6EPSS: 6%CPEs: 5EXPL: 0CVE-2018-8227
https://notcve.org/view.php?id=CVE-2018-8227
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8229. Existe una vulnerabilidad de ejecución remota de código que se manifiesta en la forma en la que el motor de scripting de Chakra gestiona los objetos en la memoria en Microsoft Edge. Esto también se conoce como "Chakra Scripting Engine Memory Corruption Vulnerability". • http://www.securityfocus.com/bid/104368 http://www.securitytracker.com/id/1041097 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8227 • CWE-787: Out-of-bounds Write •