vulnerability

Microsoft Windows: CVE-2018-0800: Chakra Scripting Engine Memory Corruption Vulnerability

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:M/Au:N/C:P/I:N/A:N)

Published

Jan 3, 2018

Added

Jan 4, 2018

Modified

Sep 3, 2025

Description

Microsoft Edge in Microsoft Windows 10 1709 allows an attacker to obtain information to further compromise the user's system, due to how the scripting engine handles objects in memory, aka "Scripting Engine Information Disclosure Vulnerability". This CVE ID is unique from CVE-2018-0767 and CVE-2018-0780.

Solution

microsoft-windows-windows_10-1709-kb4056892

References

BID-102392
CVE-2018-0800
https://attackerkb.com/topics/CVE-2018-0800
CWE-200
https://support.microsoft.com/help/4056892

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report