CVE-2018-0835: microsoft corporation microsoft edge, chakracore Out-of-bounds Write

EPSS trend

Probability

65.31%

Chance of exploitation in the next 30 days

Percentile

99%

Versus all other CVEs

30-day change

0.00 pp

From 65.31% on 18-09-2026

18-09-202618-10-2026

EPSS score

65.31%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found

exploit-databasedoswindowsVerified
Microsoft Edge Chakra JIT - 'Array.prototype.reverse' Array Type Confusion
Maturity: poc

References

10 links

www.exploit-db.com/exploits/44079/ExploitX Refsource EXPLOIT DBThird Party AdvisoryVDB Entry
www.securityfocus.com/bid/102874VDB EntryX Refsource BIDThird Party Advisory
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0835X Refsource CONFIRMPatchVendor AdvisoryWEB
www.securitytracker.com/id/1040372VDB EntryX Refsource SECTRACKThird Party Advisory
nvd.nist.gov/vuln/detail/CVE-2018-0835Advisory
github.com/chakra-core/ChakraCore/commit/d318150296e09a369202434fe6d6f70673422b6aWEB
github.com/chakra-core/ChakraCorePACKAGE
web.archive.org/web/20210124135712/http://www.securityfocus.com/bid/102874WEB
web.archive.org/web/20211208072939/http://www.securitytracker.com/id/1040372WEB
www.exploit-db.com/exploits/44079WEB

Related vulnerabilities

CVE-2018-1022microsoftchakracore+515.46%8y ago09-05-2018 19:00A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge. This CVE ID is unique from CVE-2018-0945, CVE-2018-0946, CVE-2018-0951, CVE-2018-0953, CVE-2018-0954, CVE-2018-0955, CVE-2018-8114, CVE-2018-8122, CVE-2018-8128, CVE-2018-8137, CVE-2018-8139.CVE-2018-1021microsoftedge+16.13%8y ago09-05-2018 19:00An information disclosure vulnerability exists when Microsoft Edge improperly handles objects in memory, aka "Microsoft Edge Information Disclosure Vulnerability." This affects Microsoft Edge. This CVE ID is unique from CVE-2018-8123.CVE-2018-1025microsoftedge+36.08%8y ago09-05-2018 19:00An information disclosure vulnerability exists when affected Microsoft browsers improperly handle objects in memory, aka "Microsoft Browser Information Disclosure Vulnerability." This affects Internet Explorer 11, Microsoft Edge.CVE-2018-1023microsoftchakracore+214.93%8y ago12-04-2018 01:00A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory, aka "Microsoft Browser Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore.CVE-2018-0837microsoft corporationmicrosoft edge, chakracore+365.31%8y ago15-02-2018 02:00Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0834, CVE-2018-0835, CVE-2018-0836, CVE-2018-0838, CVE-2018-0840, CVE-2018-0856, CVE-2018-0857, CVE-2018-0858, CVE-2018-0859, CVE-2018-0860, CVE-2018-0861, and CVE-2018-0866.CVE-2018-0946microsoftchakracore+351.13%8y ago09-05-2018 19:00A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-0945, CVE-2018-0951, CVE-2018-0953, CVE-2018-0954, CVE-2018-0955, CVE-2018-1022, CVE-2018-8114, CVE-2018-8122, CVE-2018-8128, CVE-2018-8137, CVE-2018-8139.

All vulnerabilities inmicrosoft edge, chakracore chakracore edge

CVE-2018-0835: microsoft corporation microsoft edge, chakracore Out-of-bounds Write

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References