{"id":"CVE-2018-8298","published":"2018-07-11T00:29:01Z","modified":"2026-06-17T02:04:35Z","title":"ChakraCore Scripting Engine Type Confusion Vulnerability","vendor":"ChakraCore","product":"ChakraCore scripting engine","tier":"core","eol":null,"description":{"text":"A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability.\" This affects ChakraCore. This CVE ID is unique from CVE-2018-8242, CVE-2018-8283, CVE-2018-8287, CVE-2018-8288, CVE-2018-8291, CVE-2018-8296.","provenance":"source","from":"NVD"},"summary":{"text":"The ChakraCore scripting engine, which is the component of the ChakraCore product that handles objects in memory, contains a type confusion flaw that results in memory corruption. An attacker who can get a victim to interact with malicious content (user interaction required, with no authentication needed and network-based access) can achieve remote code execution, though exploitation depends on a high-complexity attack condition.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-31T04:54:42Z"},"cvss":{"score":7.5,"severity":"HIGH","version":"3.1","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","provenance":"source","from":"NVD"},"epss":{"score":0.74694,"percentile":0.99502,"date":"2026-10-30","provenance":"source"},"kev":{"dateAdded":"2022-03-03","dueDate":"2022-03-17","ransomware":false,"requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-8298","provenance":"source"},"vulncheckKev":{"dateAdded":"2022-03-03","exploitedFirstSeen":"2022-03-03","ransomware":false,"evidence":[{"url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json","date":"2022-03-03"}],"evidenceTotal":1,"provenance":"source"},"exploited":true,"otx":{"pulseCount":50,"pulses":[{"name":"Actively_Exploited_Kev | Oct 29, 2026","url":"https://otx.alienvault.com/pulse/6ae20c1db17e7057ae7d9ad1","created":"2026-10-28"},{"name":"Actively_Exploited_Kev | Oct 28, 2026","url":"https://otx.alienvault.com/pulse/6ae0ba7e0e2a97ff7b218819","created":"2026-10-27"},{"name":"Actively_Exploited_Kev | Oct 27, 2026","url":"https://otx.alienvault.com/pulse/6adf68b85c3e852f3c111d18","created":"2026-10-26"},{"name":"Actively_Exploited_Kev | Oct 24, 2026","url":"https://otx.alienvault.com/pulse/6adb740e397c3ad4799aa4cd","created":"2026-10-23"},{"name":"Actively_Exploited_Kev | Oct 23, 2026","url":"https://otx.alienvault.com/pulse/6ada236fcfba2dfa730ea482","created":"2026-10-22"},{"name":"Actively_Exploited_Kev | Oct 22, 2026","url":"https://otx.alienvault.com/pulse/6ad8d33a077cbb5cab524d80","created":"2026-10-21"},{"name":"Actively_Exploited_Kev | Oct 21, 2026","url":"https://otx.alienvault.com/pulse/6ad78130c4d1ac2be83a8b6d","created":"2026-10-20"},{"name":"Actively_Exploited_Kev | Oct 20, 2026","url":"https://otx.alienvault.com/pulse/6ad62f63c24a405a3423cc13","created":"2026-10-19"},{"name":"Actively_Exploited_Kev | Oct 19, 2026","url":"https://otx.alienvault.com/pulse/6ad4dda174e5797d0bd238b7","created":"2026-10-18"},{"name":"Actively_Exploited_Kev | Oct 18, 2026","url":"https://otx.alienvault.com/pulse/6ad38c22e1848f8189d1c121","created":"2026-10-17"}],"provenance":"machine"},"cwes":[{"id":"CWE-843","name":"Access of Resource Using Incompatible Type"}],"references":[{"url":"http://www.securityfocus.com/bid/104639","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8298","tags":["Patch","Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/45217/","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/104639","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8298","tags":["Patch","Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/45217/","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-8298","tags":["US Government Resource"]}],"techniques":[{"id":"T1189","name":"Drive-by Compromise","tactics":["initial-access"],"provenance":"ai","basis":"ai-mapping","bases":["ai-mapping"],"basisDetail":"claude-haiku-5-5: Scripting engine memory corruption via browser content","mappingType":"exploitation_technique","evidence":[{"from":"description","quote":"remote code execution vulnerability exists in the way that the ChakraCore scripting engine","start":2,"end":92}],"model":"claude-haiku-5-5","confidence":"medium","confidenceNote":"AI-mapped from the description (quote-validated, not expert-reviewed)"},{"id":"T1059","name":"Command and Scripting Interpreter","tactics":["execution"],"provenance":"ai","basis":"ai-mapping","bases":["ai-mapping"],"basisDetail":"claude-haiku-5-5: Arbitrary code execution through scripting engine","mappingType":"primary_impact","evidence":[{"from":"description","quote":"remote code execution vulnerability exists in the way that the ChakraCore scripting engine","start":2,"end":92}],"model":"claude-haiku-5-5","confidence":"medium","confidenceNote":"AI-mapped from the description (quote-validated, not expert-reviewed)"}],"reports":[],"affected":[{"ecosystem":"NuGet","package":"Microsoft.ChakraCore","vulnerableRanges":["<1.10.1"],"patched":["1.10.1"],"from":["GHSA-wgw2-wwq8-c7wf"],"provenance":"source"}],"advisories":[{"id":"GHSA-wgw2-wwq8-c7wf","url":"https://github.com/advisories/GHSA-wgw2-wwq8-c7wf","severity":"HIGH","ecosystem":"NuGet","package":"Microsoft.ChakraCore","vulnerableRanges":["<1.10.1"],"patched":["1.10.1"],"provenance":"source","from":"GHSA"}],"euvd":{"id":"EUVD-2022-5575","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-5575","exploited":true,"exploitedSince":"2022-03-03","provenance":"source"},"exploits":[{"id":45217,"url":"https://www.exploit-db.com/exploits/45217","title":"Microsoft Edge Chakra JIT - InitializeNumberFormat and InitializeDateTimeFormat Type Confusion","type":"dos","platform":"windows","date":"2018-08-17","verified":true,"provenance":"source"}],"exploitSources":{"exploitdb":{"count":1,"earliest":"2018-08-17"},"first":{"date":"2018-08-17","source":"Exploit-DB","url":"https://www.exploit-db.com/exploits/45217"},"provenance":"source"},"exploitRefs":["https://www.exploit-db.com/exploits/45217/","https://www.exploit-db.com/exploits/45217"],"flow":[{"stage":"exploitation","techniques":["T1189"],"provenance":"ai"},{"stage":"primary","techniques":["T1059"],"provenance":"ai"}],"timeline":[{"date":"2018-07-11","kind":"published","label":"Published (NVD)","url":"https://nvd.nist.gov/vuln/detail/CVE-2018-8298","provenance":"source"},{"date":"2018-08-17","kind":"exploit-public","label":"First public exploit: Exploit-DB (EDB-45217)","url":"https://www.exploit-db.com/exploits/45217","provenance":"source"},{"date":"2022-03-03","kind":"exploited-reported","label":"Exploitation first reported (VulnCheck KEV evidence)","url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json","provenance":"source"},{"date":"2022-03-03","kind":"kev","label":"Added to CISA KEV","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","provenance":"source"},{"date":"2022-03-03","kind":"euvd-exploited","label":"ENISA EUVD: exploited","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-5575","provenance":"source"}],"speed":{"daysToPublicExploit":37,"firstExploitFrom":"Exploit-DB","daysToKev":1331},"priority":{"score":68.2,"factors":[{"name":"In a KEV catalog","points":35.0,"detail":"listed in CISA KEV and VulnCheck KEV"},{"name":"Recent KEV listing","points":0.0,"detail":"added 1703 days ago"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.9,"detail":"percentile 0.9950"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":5.0,"detail":"1 NVD reference tagged Exploit; 1 Exploit-DB entry; 1 advisory exploit reference"},{"name":"Mentioned in OTX pulses","points":3.0,"detail":"50 pulses"},{"name":"CVSS severity","points":5.25,"detail":"base score 7.5"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}