CVE-2018-8276: Microsoft Edge

Medium severity, CVSS 6.5. EPSS: 5.6% chance of exploitation in the next 30 days.

A security feature bypass vulnerability exists in the Microsoft Chakra scripting engine that allows Control Flow Guard (CFG) to be bypassed, aka "Scripting Engine Security Feature Bypass Vulnerability." This affects Microsoft Edge, ChakraCore.

Affected products

• Microsoft Edge: affected versions not specified

Published 2018-07-11. Last modified 2026-06-17.