vulnerability

Microsoft Windows: CVE-2018-0930: Chakra Scripting Engine Memory Corruption Vulnerability

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:H/Au:N/C:C/I:C/A:C)

Published

Mar 13, 2018

Added

Mar 13, 2018

Modified

Sep 3, 2025

Description

ChakraCore and Microsoft Edge in Microsoft Windows 10 1709 allows remote code execution, due to how the Chakra scripting engine handles objects in memory, aka "Chakra Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0872, CVE-2018-0873, CVE-2018-0874, CVE-2018-0931, CVE-2018-0933, CVE-2018-0934, CVE-2018-0936, and CVE-2018-0937.

Solution

microsoft-windows-windows_10-1709-kb4088776

References

BID-103272
CVE-2018-0930
https://attackerkb.com/topics/CVE-2018-0930
CWE-787
https://support.microsoft.com/help/4088776

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report