CVE-2018-0856: microsoft corporation microsoft edge, chakracore Out-of-bounds Write

EPSS trend

Probability

15.43%

Chance of exploitation in the next 30 days

Percentile

97%

Versus all other CVEs

30-day change

0.00 pp

From 15.43% on 20-09-2026

20-09-202620-10-2026

EPSS score

15.43%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

8 links

portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0856X Refsource CONFIRMPatchVendor AdvisoryWEB
www.securityfocus.com/bid/102880VDB EntryX Refsource BIDThird Party Advisory
www.securitytracker.com/id/1040372VDB EntryX Refsource SECTRACKThird Party Advisory
nvd.nist.gov/vuln/detail/CVE-2018-0856Advisory
github.com/chakra-core/ChakraCore/commit/385af842bce4f94ddef98553a81f8ea99c7e2dcfWEB
github.com/chakra-core/ChakraCorePACKAGE
web.archive.org/web/20210125205300/http://www.securityfocus.com/bid/102880WEB
web.archive.org/web/20211208072939/http://www.securitytracker.com/id/1040372WEB

Related vulnerabilities

CVE-2018-1022microsoftchakracore+515.46%8y ago09-05-2018 19:00A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge. This CVE ID is unique from CVE-2018-0945, CVE-2018-0946, CVE-2018-0951, CVE-2018-0953, CVE-2018-0954, CVE-2018-0955, CVE-2018-8114, CVE-2018-8122, CVE-2018-8128, CVE-2018-8137, CVE-2018-8139.CVE-2018-1021microsoftedge+16.13%8y ago09-05-2018 19:00An information disclosure vulnerability exists when Microsoft Edge improperly handles objects in memory, aka "Microsoft Edge Information Disclosure Vulnerability." This affects Microsoft Edge. This CVE ID is unique from CVE-2018-8123.CVE-2018-1025microsoftedge+36.08%8y ago09-05-2018 19:00An information disclosure vulnerability exists when affected Microsoft browsers improperly handle objects in memory, aka "Microsoft Browser Information Disclosure Vulnerability." This affects Internet Explorer 11, Microsoft Edge.CVE-2018-1023microsoftchakracore+214.93%8y ago12-04-2018 01:00A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory, aka "Microsoft Browser Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore.CVE-2018-0837microsoft corporationmicrosoft edge, chakracore+365.31%8y ago15-02-2018 02:00Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0834, CVE-2018-0835, CVE-2018-0836, CVE-2018-0838, CVE-2018-0840, CVE-2018-0856, CVE-2018-0857, CVE-2018-0858, CVE-2018-0859, CVE-2018-0860, CVE-2018-0861, and CVE-2018-0866.CVE-2018-0946microsoftchakracore+351.13%8y ago09-05-2018 19:00A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-0945, CVE-2018-0951, CVE-2018-0953, CVE-2018-0954, CVE-2018-0955, CVE-2018-1022, CVE-2018-8114, CVE-2018-8122, CVE-2018-8128, CVE-2018-8137, CVE-2018-8139.

All vulnerabilities inmicrosoft edge, chakracore chakracore edge

CVE-2018-0856: microsoft corporation microsoft edge, chakracore Out-of-bounds Write

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References