{"schemaVersion":3,"id":"CVE-2018-8298","aliases":["GHSA-wgw2-wwq8-c7wf"],"status":"published","duplicateOf":null,"title":"ChakraCore Scripting Engine Type Confusion Vulnerability","description":"A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka \"Scripting Engine Memory Corruption Vulnerability.\" This affects ChakraCore. This CVE ID is unique from CVE-2018-8242, CVE-2018-8283, CVE-2018-8287, CVE-2018-8288, CVE-2018-8291, CVE-2018-8296.","dates":{"published":"2018-07-11T00:00:00.000Z","modified":"2025-10-21T23:45:49.700Z","reserved":null,"kevAdded":["2022-03-03T00:00:00.000Z"],"kevDue":["2022-03-17T00:00:00.000Z"]},"cvss":{"headline":{"score":7.6,"severity":"high","version":"2.0","versionLabel":"v2.0","source":"NVD","vector":"AV:N/AC:H/Au:N/C:C/I:C/A:C","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":7.6,"severity":"high","vector":"AV:N/AC:H/Au:N/C:C/I:C/A:C","exploitability":null,"impact":null,"computed":false},{"version":"3.0","versionLabel":"v3.0","source":"OSV · Nuget","score":7.5,"severity":"high","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:H","exploitability":4.1,"impact":9.8,"computed":true}]},"epss":{"probability":0.74694,"percentile":0.99503,"severity":"critical","asOf":"2026-10-21T00:00:00.000Z","change":{"pp":0.17300000000000093,"baselineDate":"2026-09-21T00:00:00.000Z","baselineScore":0.74521},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.74789,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.74521,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.74521,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.74521,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.74521,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.74521,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.74521,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.74521,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.74521,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.74521,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.74521,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.74521,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.74521,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.74521,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.74521,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.74521,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.74521,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.74521,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.74694,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.74694,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.74694,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.74694,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.74694,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.74694,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.74694,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.74694,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.74694,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.74694,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.74694,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.74694,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.74694,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.74694,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.74694,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.74694,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.74694,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.74694,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.74694,"percentile":null},{"date":"2026-10-21T00:00:00.000Z","score":0.74694,"percentile":0.99503}],"last30":[{"date":"2026-09-21T00:00:00.000Z","score":0.74521,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.74521,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.74521,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.74521,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.74521,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.74521,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.74521,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.74521,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.74521,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.74521,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.74521,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.74694,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.74694,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.74694,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.74694,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.74694,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.74694,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.74694,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.74694,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.74694,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.74694,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.74694,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.74694,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.74694,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.74694,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.74694,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.74694,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.74694,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.74694,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.74694,"percentile":null},{"date":"2026-10-21T00:00:00.000Z","score":0.74694,"percentile":0.99503}]},"kev":{"state":"listed","entries":[{"source":"cisa","sourceLabel":"CISA","dateAdded":"2022-03-03T00:00:00.000Z","dueDate":"2022-03-17T00:00:00.000Z","requiredAction":"Apply updates per vendor instructions.","name":"ChakraCore Scripting Engine Type Confusion Vulnerability","description":"The ChakraCore scripting engine contains a type confusion vulnerability which can allow for remote code execution.","notes":[{"type":"url","href":"https://nvd.nist.gov/vuln/detail/CVE-2018-8298","label":"nvd.nist.gov/vuln/detail/CVE-2018-8298"}],"vendor":"ChakraCore","product":"ChakraCore scripting engine","ransomware":false,"ransomwareUse":"Unknown","exploitationType":null}],"listedCount":1,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":true,"entry":{"source":"cisa","sourceLabel":"CISA","dateAdded":"2022-03-03T00:00:00.000Z","dueDate":"2022-03-17T00:00:00.000Z","requiredAction":"Apply updates per vendor instructions.","name":"ChakraCore Scripting Engine Type Confusion Vulnerability","description":"The ChakraCore scripting engine contains a type confusion vulnerability which can allow for remote code execution.","notes":[{"type":"url","href":"https://nvd.nist.gov/vuln/detail/CVE-2018-8298","label":"nvd.nist.gov/vuln/detail/CVE-2018-8298"}],"vendor":"ChakraCore","product":"ChakraCore scripting engine","ransomware":false,"ransomwareUse":"Unknown","exploitationType":null}},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[{"id":"45217","name":"Microsoft Edge Chakra JIT - InitializeNumberFormat and InitializeDateTimeFormat Type Confusion","source":"exploit-database","url":"https://www.exploit-db.com/exploits/45217","maturity":"poc","reliabilityScore":0.8,"verified":true,"type":"dos","platforms":["windows"],"requiresAuth":null,"exploitdb":{"verified":true,"type":"dos","platform":"windows","file":"exploits/windows/dos/45217.js","codes":["CVE-2018-8298"]},"metasploit":null}],"exploitCount":1,"weaknesses":[{"id":"CWE-843","name":"Access of Resource Using Incompatible Type ('Type Confusion')","description":"The product allocates or initializes a resource such as a pointer, object, or variable using one type, but it later accesses that resource using a type that is incompatible with the original type.","type":"weakness","status":"Incomplete","abstraction":"Base","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/843.html"}],"affected":[{"vendor":"microsoft","product":"chakracore","name":"chakracore","label":"chakracore","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"ChakraCore","noFixRecorded":false,"fixedIn":null},{"text":"< 1.10.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"ChakraCore | < 1.10.1","eol":null,"hubHref":"/vendor/microsoft/chakracore"},{"vendor":"NuGet","product":"Microsoft.ChakraCore","name":"Microsoft.ChakraCore","label":"Microsoft.ChakraCore","ecosystem":"NuGet","cpePart":null,"purl":"pkg:nuget/Microsoft.ChakraCore","purlType":"nuget","versions":[{"text":"< 1.10.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.10.1","eol":null,"hubHref":null}],"affectedCount":2,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8298","label":"portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8298","hostname":"portal.msrc.microsoft.com","tags":["X Refsource CONFIRM","Patch","Vendor Advisory","WEB"]},{"url":"http://www.securityfocus.com/bid/104639","label":"www.securityfocus.com/bid/104639","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID","Broken Link","Third Party Advisory"]},{"url":"https://www.exploit-db.com/exploits/45217/","label":"www.exploit-db.com/exploits/45217/","hostname":"www.exploit-db.com","tags":["Exploit","X Refsource EXPLOIT DB","Third Party Advisory","VDB Entry"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-8298","label":"www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-8298","hostname":"www.cisa.gov","tags":["Government Resource","US Government Resource","WEB"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-8298","label":"nvd.nist.gov/vuln/detail/CVE-2018-8298","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://github.com/chakra-core/ChakraCore/pull/5444","label":"github.com/chakra-core/ChakraCore/pull/5444","hostname":"github.com","tags":["WEB"]},{"url":"https://github.com/chakra-core/ChakraCore/commit/cb9957e2763c36dbd12afa5c9261465159e16c86","label":"github.com/chakra-core/ChakraCore/commit/cb9957e2763c36dbd12afa5c9261465159e16c86","hostname":"github.com","tags":["WEB"]},{"url":"https://github.com/chakra-core/ChakraCore","label":"github.com/chakra-core/ChakraCore","hostname":"github.com","tags":["PACKAGE"]},{"url":"https://web.archive.org/web/20210124183835/http://www.securityfocus.com/bid/104639","label":"web.archive.org/web/20210124183835/http://www.securityfocus.com/bid/104639","hostname":"web.archive.org","tags":["WEB"]},{"url":"https://www.exploit-db.com/exploits/45217","label":"www.exploit-db.com/exploits/45217","hostname":"www.exploit-db.com","tags":["WEB"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2018-07-11T00:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"kev-added","date":"2022-03-03T00:00:00.000Z","label":"Added to CISA KEV","detail":"ChakraCore Scripting Engine Type Confusion Vulnerability","source":"cisa"},{"kind":"kev-due","date":"2022-03-17T00:00:00.000Z","label":"CISA remediation due","detail":"Apply updates per vendor instructions.","source":"cisa"},{"kind":"modified","date":"2025-10-21T23:45:49.700Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":85,"level":"critical","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T23:45:50.647Z","stale":false,"partial":false}}