CVE-2018-0953

Scores

EPSS

0.770medium77.0%
0%20%40%60%80%100%

Percentile: 77.0%

CVSS

7.5high3.x
0246810

CVSS Score: 7.5/10

All CVSS Scores

CVSS 3.x
7.5

Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

CVSS 2.0
7.6

Vector: AV:N/AC:H/Au:N/C:C/I:C/A:C

Description

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka “Scripting Engine Memory Corruption Vulnerability.” This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-0945, CVE-2018-0946, CVE-2018-0951, CVE-2018-0954, CVE-2018-0955, CVE-2018-1022, CVE-2018-8114, CVE-2018-8122, CVE-2018-8128, CVE-2018-8137, CVE-2018-8139.

Scaner-VS 7 — a modern vulnerability management solution

Uses this database for vulnerability detection. High-speed search, cross-platform, advanced configuration audit, and flexible filtering. Suitable for organizations of any size.
Learn more about Scaner-VS 7

Sources

msrcnvd

CWEs

CWE-787

Related Vulnerabilities

Exploits

Exploit ID: 44694

Source: exploitdb

URL: https://www.exploit-db.com/exploits/44694

Vulnerable Software (78)

Type: Configuration

Vendor: microsoft

Product: chakracore

Operating System: * * *

Trait:
{  "cpe_match": [    {      "cpe23uri": "cpe:2.3:a:microsoft:chakracore:*:*:*:*:*:*:*:*",      "versionEndIncluding": "1.8.3",      "vulnerable": true    }  ],  "operator": "OR"}

Source: nvd

Type: Configuration

Vendor: microsoft

Product: edge

Operating System: * * *

Trait:
{  "cpe_match": [    {      "cpe23uri": "cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*",      "vulnerable": true    }  ],  "operator": "OR"}

Source: nvd

Type: Windows KB

Vendor: Microsoft

Product: Windows

Version: 14393.5427

Operating System: Windows 14393 build 5427

Identifier: KB5018411

Source: msrc

Type: Windows KB

Vendor: Microsoft

Product: Windows

Version: 14393.6452

Operating System: Windows 14393 build 6452

Identifier: KB5032197

Source: msrc

Type: Windows KB

Vendor: Microsoft

Product: Windows

Version: 14393.8246

Operating System: Windows 14393 build 8246

Identifier: KB5062560

Source: msrc

Type: Windows KB

Vendor: Microsoft

Product: Windows

Version: 14393.2906

Operating System: Windows 14393 build 2906

Identifier: KB4493470

Source: msrc

Type: Windows KB

Vendor: Microsoft

Product: Windows

Version: 14393.6529

Operating System: Windows 14393 build 6529

Identifier: KB5033373

Source: msrc

Type: Windows KB

Vendor: Microsoft

Product: Windows

Version: 14393.5502

Operating System: Windows 14393 build 5502

Identifier: KB5021654

Source: msrc

Type: Windows KB

Vendor: Microsoft

Product: Windows

Version: 14393.7699

Operating System: Windows 14393 build 7699

Identifier: KB5049993

Source: msrc

Type: Windows KB

Vendor: Microsoft

Product: Windows

Version: 14393.3595

Operating System: Windows 14393 build 3595

Identifier: KB4541329

Source: msrc