CVE

CVE-2018-8298

ChakraCore Scripting Engine Type Confusion Vulnerability

ChakraCore · ChakraCore scripting engine

Date added (CISA)

2022-03-03

Remediation due

2022-03-17

Known ransomware use

Not indicated

Remediation priority

P2 — past CISA due date

Description

The ChakraCore scripting engine contains a type confusion vulnerability which can allow for remote code execution.