GHSA-w3qr-8v4r-592m
ChakraCore information disclosure vulnerability
At a glance
- Published
- Updated
- CVE
- CVE-2018-8452
- CVSS_V3
- CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
Description
An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory in Microsoft browsers, aka "Scripting Engine Information Disclosure Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge.
Affected packages
| Package | Versions |
|---|---|
| NuGet · Microsoft.ChakraCore | introduced 0, fixed 1.11.1 |
References
- https://nvd.nist.gov/vuln/detail/CVE-2018-8452 ADVISORY
- https://github.com/chakra-core/ChakraCore/commit/3f3544801cc01e9f54cab84b20602a3b5e29c3ef WEB
- https://github.com/chakra-core/ChakraCore PACKAGE
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8452 WEB
- https://web.archive.org/web/20210124203129/http://www.securityfocus.com/bid/105252 WEB
- https://web.archive.org/web/20221128100304/http://www.securitytracker.com/id/1041623 WEB
Sources
| Source | Licence |
|---|---|
| OSV.dev | CC-BY 4.0 — GitHub Advisory Database |