Medium severity6.5NVD Advisory· Published Jul 11, 2018· Updated Jun 17, 2026

CVE-2018-8276

Description

A security feature bypass vulnerability exists in the Microsoft Chakra scripting engine that allows Control Flow Guard (CFG) to be bypassed, aka "Scripting Engine Security Feature Bypass Vulnerability." This affects Microsoft Edge, ChakraCore.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
Microsoft.ChakraCoreNuGet	< 1.10.1	1.10.1

Affected products

ghsa-coords
pkg:nuget/microsoft.chakracore
Range: < 1.10.1
Microsoft/Chakracorecpe-rescue
Range: ChakraCore
Microsoft/Edgecpe-rescue
Range: Windows 10 Version 1703 for 32-bit Systems

Patches

Vulnerability mechanics

References

portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8276nvdPatchVendor AdvisoryWEB
www.securityfocus.com/bid/104626nvdThird Party AdvisoryVDB Entry
www.securitytracker.com/id/1041256nvdThird Party AdvisoryVDB Entry
github.com/advisories/GHSA-wg47-6cqc-q52jghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2018-8276ghsaADVISORY
github.com/chakra-core/ChakraCore/commit/4196f8097afdcc5fe01ce2966871712fb24003a3ghsaWEB
web.archive.org/web/20210124183457/http://www.securityfocus.com/bid/104626ghsaWEB
web.archive.org/web/20211202002348/http://www.securitytracker.com/id/1041256ghsaWEB

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.004
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000