<< Back
CVE Number Vulnerability Product Severity Date
CVE-2018-8541 Chakra Scripting Engine Memory Corruption Vulnerability Microsoft Edge Critical 14-11-2018

Technical Information

Brief overview of the risk:
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user.

Detailed Information on the risk:
In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft Edge and then convince a user to view the website. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.

Further information on this exploit is available at : CVE-2018-8541

Affected Software


Microsoft Edge on Windows 10 Version 1803 for 32-bit Systems,
Microsoft Edge on Windows 10 Version 1803 for x64-based Systems,
Microsoft Edge on Windows 10 Version 1803 for ARM64-based Systems,
Microsoft Edge on Windows 10 Version 1809 for 32-bit Systems,
Microsoft Edge on Windows 10 Version 1809 for x64-based Systems,
Microsoft Edge on Windows 10 Version 1809 for ARM64-based Systems,
Microsoft Edge on Windows Server 2019,
ChakraCore