Vulnerability Description
An information disclosure vulnerability exists when Chakra improperly discloses the contents of its memory, which could provide an attacker with information to further compromise the user's computer or data, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge, Internet Explorer 10. This CVE ID is unique from CVE-2018-0943, CVE-2018-8130, CVE-2018-8133, CVE-2018-8177.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Microsoft | Chakracore | <= 1.8.3 |
| Microsoft | Internet Explorer | 10 |
| Microsoft | Windows Server 2012 | - |
| Microsoft | Edge | - |
| Microsoft | Windows 10 | - |
| Microsoft | Windows Server 2016 | - |
| Microsoft | Windows 7 | - |
| Microsoft | Windows 8.1 | - |
| Microsoft | Windows Rt 8.1 | - |
| Microsoft | Windows Server 2008 | r2 |
Related Weaknesses (CWE)
References
- http://www.securityfocus.com/bid/103986Third Party AdvisoryVDB Entry
- http://www.securitytracker.com/id/1040844Third Party AdvisoryVDB Entry
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8145PatchVendor Advisory
- https://www.exploit-db.com/exploits/45011/ExploitThird Party AdvisoryVDB Entry
- http://www.securityfocus.com/bid/103986Third Party AdvisoryVDB Entry
- http://www.securitytracker.com/id/1040844Third Party AdvisoryVDB Entry
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8145PatchVendor Advisory
- https://www.exploit-db.com/exploits/45011/ExploitThird Party AdvisoryVDB Entry
FAQ
What is CVE-2018-8145?
CVE-2018-8145 is a vulnerability with a CVSS score of 7.5 (HIGH). An information disclosure vulnerability exists when Chakra improperly discloses the contents of its memory, which could provide an attacker with information to further compromise the user's computer o...
How severe is CVE-2018-8145?
CVE-2018-8145 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2018-8145?
Check the references section above for vendor advisories and patch information. Affected products include: Microsoft Chakracore, Microsoft Internet Explorer, Microsoft Windows Server 2012, Microsoft Edge, Microsoft Windows 10.