CVE-2018-0818: Code Injection

January 10, 2018 (updated October 3, 2019)

Microsoft ChakraCore allows an attacker to bypass Control Flow Guard (CFG) in conjunction with another vulnerability to run arbitrary code on a target system, due to how the Chakra scripting engine handles accessing memory, aka “Scripting Engine Security Feature Bypass”.

References

www.securityfocus.com/bid/102412
nvd.nist.gov/vuln/detail/CVE-2018-0818
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0818

Code Behaviors & Features

Detect and mitigate CVE-2018-0818 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →