VYPR
← All advisories
High severityNVD Advisory· Published Aug 15, 2018· Updated Aug 5, 2024

CVE-2018-8385

CVE-2018-8385

Description

A scripting engine memory corruption vulnerability in Microsoft browsers (ChakraCore, Edge, Internet Explorer) allows remote code execution via crafted content.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

A scripting engine memory corruption vulnerability in Microsoft browsers (ChakraCore, Edge, Internet Explorer) allows remote code execution via crafted content.

Vulnerability

The vulnerability exists in the way the Chakra scripting engine handles objects in memory [1][2][3]. It affects Internet Explorer 9, 10, and 11, Microsoft Edge, and ChakraCore [2]. The issue involves an inconsistent state when merging block data for loops, where a non-temporary symbol can be treated as temporary, leading to memory corruption [4]. Additional flaws include incorrect elimination of bound checks (potentially causing out-of-bounds read/write) and re-entrancy issues during marshalling when proxies are in the prototype chain [4].

Exploitation

An attacker can host a specially crafted website or inject content into a compromised site [3]. The target user must browse to this page using an affected browser. No authentication is required; the attacker only needs network access to deliver the malicious content. By triggering the memory corruption via crafted JavaScript, the attacker can execute arbitrary code in the context of the current user [2][3].

Impact

Successful exploitation allows remote code execution, giving the attacker the same user rights as the logged-on user [2]. If the user has administrative privileges, the attacker can install programs, view/change/delete data, or create new accounts with full user rights [2]. The impact includes complete compromise of confidentiality, integrity, and availability.

Mitigation

Microsoft released security updates on August 14, 2018, which are confirmed as a fix [1][3]. Users should apply the latest updates via Windows Update or Microsoft Update. No workarounds are documented in the provided references. The update addresses the memory corruption in ChakraCore and the affected browsers [4].

References
  1. Microsoft Internet Explorer and Edge CVE-2018-8385 Remote Memory Corruption Vulnerability
  2. NVD - CVE-2018-8385
  3. Microsoft Edge Multiple Bugs Let Remote Users Execute Arbitrary Code, Obtain Potentially Sensitive Information, Gain Elevated Privileges, and Bypass Security Restrictions on the Target System
  4. August 2018 Security Update by aneeshdk · Pull Request #5596 · chakra-core/ChakraCore

AI Insight generated on May 22, 2026. Synthesized from this CVE's description and the cited reference URLs; citations are validated against the source bundle.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
Microsoft.ChakraCoreNuGet
< 1.10.21.10.2

Affected products

6

Patches

1
f00612bbc365

[CVE-2018-8385] Edge - Logic bug in Chakra temp tracker leads to invalid pointer read - Internal

https://github.com/chakra-core/ChakraCoreMichael HolmanJun 23, 2018via ghsa
commit
1 file changed · +13 −3
  • lib/Backend/TempTracker.cpp+13 −3 modified
    @@ -79,9 +79,19 @@ TempTrackerBase::~TempTrackerBase()
 void
 TempTrackerBase::MergeData(TempTrackerBase * fromData, bool deleteData)
 {
-    nonTempSyms.Or(&fromData->nonTempSyms);
-    tempTransferredSyms.Or(&fromData->tempTransferredSyms);
-    MergeDependencies(tempTransferDependencies, fromData->tempTransferDependencies, deleteData);
+    this->nonTempSyms.Or(&fromData->nonTempSyms);
+    this->tempTransferredSyms.Or(&fromData->tempTransferredSyms);
+    this->MergeDependencies(this->tempTransferDependencies, fromData->tempTransferDependencies, deleteData);
+    if (this->tempTransferDependencies)
+    {
+        FOREACH_HASHTABLE_ENTRY(BVSparse<JitArenaAllocator> *, bucket, this->tempTransferDependencies)
+        {
+            if (bucket.element->Test(&this->nonTempSyms))
+            {
+                this->nonTempSyms.Set(bucket.value);
+            }
+        } NEXT_HASHTABLE_ENTRY;
+    }
 }
 
 void

Vulnerability mechanics

Generated on May 9, 2026. Inputs: CWE entries + fix-commit diffs from this CVE's patches. Citations validated against bundle.

References

9

News mentions

0

No linked articles in our index yet.