Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.5

Microsoft Edge allows hackers to take control of your computer

CVE-2018-8354 · published 8 years ago
Summary

A security weakness in Microsoft Edge's scripting engine lets hackers potentially take control of your computer if you visit a malicious website. This affects users of Microsoft Edge on Windows. To stay safe, make sure your browser and operating system are up to date with the latest security patches.

What to do
  • Update microsoft microsoft.chakracore to version 1.11.1.
Affected software
Ecosystem VendorProductAffected versions
– microsoft chakracore <= 1.10.1
cpe:2.3:a:microsoft:chakracore:*:*:*:*:*:*:*:*
– microsoft edge All versions
cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*
nuget microsoft microsoft.chakracore < 1.11.1
Fix: upgrade to 1.11.1
Original advisory text
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scripting Engine Memory Corruption Vulnerability." This affects M...
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8391, CVE-2018-8456, CVE-2018-8457, CVE-2018-8459.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker full control (estimated)
Severity
7.5 High
Exploitation
15% chance of attack within 30 days
Type
CWE-787Out-of-bounds Write
Timeline
Published13 Sep 2018
Updated20 Oct 2026
First seen6 Mar 2026
Sources
GHSA-6g23-fww6-rfrj · GHSA
CVE-2018-8354 · NVD
Track software like this
Free during beta