CVE-2018-0934: microsoft corporation chakracore, microsoft edge

EPSS trend

Probability

66.23%

Chance of exploitation in the next 30 days

Percentile

99%

Versus all other CVEs

30-day change

0.00 pp

From 66.23% on 18-09-2026

18-09-202618-10-2026

EPSS score

66.23%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

2 found

exploit-databasedoswindowsVerified
Microsoft Edge Chakra JIT - Stack-to-Heap Copy (Incomplete Fix) (1)
Maturity: poc
exploit-databasedoswindowsVerified
Microsoft Edge Chakra JIT - Stack-to-Heap Copy (Incomplete Fix) (2)
Maturity: poc

References

12 links

portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0934X Refsource CONFIRMPatchVendor AdvisoryWEB
www.exploit-db.com/exploits/44397/ExploitX Refsource EXPLOIT DBThird Party AdvisoryVDB Entry
www.exploit-db.com/exploits/44396/ExploitX Refsource EXPLOIT DBThird Party AdvisoryVDB Entry
www.securitytracker.com/id/1040507VDB EntryX Refsource SECTRACKThird Party Advisory
www.securityfocus.com/bid/103275VDB EntryX Refsource BIDThird Party Advisory
nvd.nist.gov/vuln/detail/CVE-2018-0934Advisory
github.com/chakra-core/ChakraCore/commit/6d0f5de1e0331fd6dd4f1ee0c0032430bcb131c3WEB
github.com/chakra-core/ChakraCorePACKAGE
web.archive.org/web/20210125205549/http://www.securityfocus.com/bid/103275WEB
web.archive.org/web/20211026192005/http://www.securitytracker.com/id/1040507WEB

Show all 12 references

Related vulnerabilities

CVE-2018-0933microsoft corporationchakracore, microsoft edge+266.31%8y ago14-03-2018 17:00ChakraCore and Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the Chakra scripting engine handles objects in memory, aka "Chakra Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0872, CVE-2018-0873, CVE-2018-0874, CVE-2018-0930, CVE-2018-0931, CVE-2018-0934, CVE-2018-0936, and CVE-2018-0937.CVE-2018-0872microsoft corporationchakracore, microsoft edge+115.75%8y ago14-03-2018 17:00ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the Chakra scripting engine handles objects in memory, aka "Chakra Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0873, CVE-2018-0874, CVE-2018-0930, CVE-2018-0931, CVE-2018-0933, CVE-2018-0934, CVE-2018-0936, and CVE-2018-0937.CVE-2018-0939microsoft corporationchakracore, microsoft edge+15.50%8y ago14-03-2018 17:00ChakraCore and Microsoft Edge in Windows 10 1703 and 1709 allow information disclosure, due to how the scripting engine handles objects in memory, aka "Scripting Engine Information Disclosure Vulnerability". This CVE ID is unique from CVE-2018-0891.CVE-2018-0931microsoft corporationchakracore, microsoft edge+111.44%8y ago14-03-2018 17:00ChakraCore and Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the Chakra scripting engine handles objects in memory, aka "Chakra Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0872, CVE-2018-0873, CVE-2018-0874, CVE-2018-0930, CVE-2018-0933, CVE-2018-0934, CVE-2018-0936, and CVE-2018-0937.CVE-2018-0873microsoft corporationchakracore, microsoft edge+115.43%8y ago14-03-2018 17:00ChakraCore and Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the Chakra scripting engine handles objects in memory, aka "Chakra Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0872, CVE-2018-0874, CVE-2018-0930, CVE-2018-0931, CVE-2018-0933, CVE-2018-0934, CVE-2018-0936, and CVE-2018-0937.CVE-2018-0874microsoft corporationchakracore, microsoft edge+115.75%8y ago14-03-2018 17:00ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the Chakra scripting engine handles objects in memory, aka "Chakra Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0872, CVE-2018-0873, CVE-2018-0930, CVE-2018-0931, CVE-2018-0933, CVE-2018-0934, CVE-2018-0936, and CVE-2018-0937.

All vulnerabilities inchakracore, microsoft edge chakracore

CVE-2018-0934: microsoft corporation chakracore, microsoft edge

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References