CVE-2018-0818: Microsoft ChakraCore

High severity, CVSS 7.5. EPSS: 3.7% chance of exploitation in the next 30 days.

Microsoft ChakraCore allows an attacker to bypass Control Flow Guard (CFG) in conjunction with another vulnerability to run arbitrary code on a target system, due to how the Chakra scripting engine handles accessing memory, aka "Scripting Engine Security Feature Bypass".

Affected products

• Microsoft ChakraCore: affected versions not specified

Published 2018-01-10. Last modified 2026-06-17.