deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-10917
Published: 2018-08-15
Description: pulp 2.16.x and possibly older is vulnerable to an improper path parsing. A malicious user or a malicious iso feed repository can write to locations accessible to the 'apache' user. This may lead to overwrite of published content on other iso repositories.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://access.redhat.com/errata/RHSA-2019:1222; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10917; https://access.redhat.com/errata/RHSA-2019:1222
CVE: CVE-2018-11687
Published: 2018-08-15
Description: An integer overflow in the distributeBTR function of a smart contract implementation for Bitcoin Red (BTCR), an Ethereum ERC20 token, allows the owner to accomplish an unauthorized increase of digital assets by providing a large address[] array, as exploited in the wild in May 2018, aka the "ownerUnderflow" issue.
CVSS Score: 7.5 (HIGH)
CWE: CWE-190
References: https://www.anquanke.com/post/id/147913; https://www.anquanke.com/post/id/147913
CVE: CVE-2018-12056
Published: 2018-08-15
Description: The maxRandom function of a smart contract implementation for All For One, an Ethereum gambling game, generates a random value with publicly readable variables because the _seed value can be retrieved with a getStorageAt call. Therefore, it allows attackers to always win and get rewards.
CVSS Score: 7.5 (HIGH)
CWE: CWE-338
References: https://lists.apache.org/thread.html/a62aa2706105d68f1c02023fe24aaa3c13b4d8a1826181fed07d9682%40%3Cnotifications.zookeeper.apache.org%3E; https://medium.com/%40jonghyk.song/to-be-a-winner-of-ethereum-gambling-game-all-for-one-by-breaking-prng-1ab011163d40; https://lists.apache.org/thread.html/a62aa2706105d68f1c02023fe24aaa3c13b4d8a1826181fed07d9682%40%3Cnotifications.zookeeper.apache.org%3E
CVE: CVE-2018-15138
Published: 2018-08-15
Description: Ericsson-LG iPECS NMS 30M allows directory traversal via ipecs-cm/download?filename=../ URIs.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://www.exploit-db.com/exploits/45167/; https://www.exploit-db.com/exploits/45167/
CVE: CVE-2018-15146
Published: 2018-08-15
Description: SQL injection vulnerability in interface/de_identification_forms/find_immunization_popup.php in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbitrary SQL commands via the 'search_term' parameter.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://github.com/openemr/openemr/pull/1757/files; https://insecurity.sh/reports/openemr.pdf; https://www.databreaches.net/openemr-patches-serious-vulnerabilities-uncovered-by-project-insecurity/
CVE: CVE-2018-15147
Published: 2018-08-15
Description: SQL injection vulnerability in interface/forms_admin/forms_admin.php from library/registry.inc in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbitrary SQL commands via the 'id' parameter.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://github.com/openemr/openemr/pull/1757/files; https://insecurity.sh/reports/openemr.pdf; https://www.databreaches.net/openemr-patches-serious-vulnerabilities-uncovered-by-project-insecurity/
CVE: CVE-2018-15148
Published: 2018-08-15
Description: SQL injection vulnerability in interface/patient_file/encounter/search_code.php in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbitrary SQL commands via the 'text' parameter.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://github.com/openemr/openemr/pull/1757/files; https://insecurity.sh/reports/openemr.pdf; https://www.databreaches.net/openemr-patches-serious-vulnerabilities-uncovered-by-project-insecurity/
CVE: CVE-2018-15149
Published: 2018-08-15
Description: SQL injection vulnerability in interface/forms/eye_mag/php/Anything_simple.php from library/forms.inc in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbitrary SQL commands via the 'encounter' parameter.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://github.com/openemr/openemr/pull/1757/files; https://insecurity.sh/reports/openemr.pdf; https://www.databreaches.net/openemr-patches-serious-vulnerabilities-uncovered-by-project-insecurity/
CVE: CVE-2018-15150
Published: 2018-08-15
Description: SQL injection vulnerability in interface/de_identification_forms/de_identification_screen2.php in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbitrary SQL commands via the 'temporary_files_dir' variable in interface/super/edit_globals.php.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://github.com/openemr/openemr/pull/1757/files; https://insecurity.sh/reports/openemr.pdf; https://www.databreaches.net/openemr-patches-serious-vulnerabilities-uncovered-by-project-insecurity/
CVE: CVE-2018-15151
Published: 2018-08-15
Description: SQL injection vulnerability in interface/de_identification_forms/find_code_popup.php in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbitrary SQL commands via the 'search_term' parameter.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://github.com/openemr/openemr/pull/1757/files; https://insecurity.sh/reports/openemr.pdf; https://www.databreaches.net/openemr-patches-serious-vulnerabilities-uncovered-by-project-insecurity/
CVE: CVE-2018-15152
Published: 2018-08-15
Description: Authentication bypass vulnerability in portal/account/register.php in versions of OpenEMR before 5.0.1.4 allows a remote attacker to access (1) portal/add_edit_event_user.php, (2) portal/find_appt_popup_user.php, (3) portal/get_allergies.php, (4) portal/get_amendments.php, (5) portal/get_lab_results.php, (6) portal/get_medications.php, (7) portal/get_patient_documents.php, (8) portal/get_problems.php, (9) portal/get_profile.php, (10) portal/portal_payment.php, (11) portal/messaging/messages.php, (12) portal/messaging/secure_chat.php, (13) portal/report/pat_ledger.php, (14) portal/report/portal_custom_report.php, or (15) portal/report/portal_patient_report.php without authenticating as a patient.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-287
References: http://packetstormsecurity.com/files/163181/OpenEMR-5.0.1.3-Authentication-Bypass.html; https://github.com/Hacker5preme/Exploits/tree/main/CVE-2018-15152-Exploit; https://github.com/openemr/openemr/pull/1758/files
CVE: CVE-2018-15153
Published: 2018-08-15
Description: OS command injection occurring in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbitrary commands by making a crafted request to interface/main/daemon_frame.php after modifying the "hylafax_server" global variable in interface/super/edit_globals.php.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://github.com/openemr/openemr/pull/1757; https://insecurity.sh/reports/openemr.pdf; https://www.databreaches.net/openemr-patches-serious-vulnerabilities-uncovered-by-project-insecurity/
CVE: CVE-2018-15154
Published: 2018-08-15
Description: OS command injection occurring in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbitrary commands by making a crafted request to interface/billing/sl_eob_search.php after modifying the "print_command" global variable in interface/super/edit_globals.php.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://github.com/openemr/openemr/pull/1757; https://insecurity.sh/reports/openemr.pdf; https://www.databreaches.net/openemr-patches-serious-vulnerabilities-uncovered-by-project-insecurity/
CVE: CVE-2018-15155
Published: 2018-08-15
Description: OS command injection occurring in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbitrary commands by making a crafted request to interface/fax/fax_dispatch.php after modifying the "hylafax_enscript" global variable in interface/super/edit_globals.php.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://github.com/openemr/openemr/pull/1757; https://insecurity.sh/reports/openemr.pdf; https://www.databreaches.net/openemr-patches-serious-vulnerabilities-uncovered-by-project-insecurity/
CVE: CVE-2018-15156
Published: 2018-08-15
Description: OS command injection occurring in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbitrary commands by making a crafted request to interface/fax/faxq.php after modifying the "hylafax_server" global variable in interface/super/edit_globals.php.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://github.com/openemr/openemr/pull/1757; https://insecurity.sh/reports/openemr.pdf; https://www.databreaches.net/openemr-patches-serious-vulnerabilities-uncovered-by-project-insecurity/
CVE: CVE-2018-15172
Published: 2018-08-15
Description: TP-Link WR840N devices have a buffer overflow via a long Authorization HTTP header.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: https://hackingvila.wordpress.com/2018/08/08/tp-link-buffer-overflow-via-a-long-authorization-http-header-cve-2018-15172/; https://www.exploit-db.com/exploits/45203/; https://hackingvila.wordpress.com/2018/08/08/tp-link-buffer-overflow-via-a-long-authorization-http-header-cve-2018-15172/
CVE: CVE-2018-8200
Published: 2018-08-15
Description: A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code into a Windows PowerShell session, aka "Device Guard Code Integrity Policy Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-8204.
CVSS Score: 5.3 (MEDIUM)
References: http://www.securityfocus.com/bid/105007; http://www.securitytracker.com/id/1041459; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8200
CVE: CVE-2018-8204
Published: 2018-08-15
Description: A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code into a Windows PowerShell session, aka "Device Guard Code Integrity Policy Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-8200.
CVSS Score: 5.3 (MEDIUM)
References: http://www.securityfocus.com/bid/105008; http://www.securitytracker.com/id/1041459; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8204
CVE: CVE-2018-8253
Published: 2018-08-15
Description: An elevation of privilege vulnerability exists when Microsoft Cortana allows arbitrary website browsing on the lockscreen, aka "Microsoft Cortana Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10.
CVSS Score: 4.6 (MEDIUM)
References: http://www.securityfocus.com/bid/105009; http://www.securitytracker.com/id/1041477; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8253
CVE: CVE-2018-8266
Published: 2018-08-15
Description: A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8380, CVE-2018-8381, CVE-2018-8384.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/104977; http://www.securitytracker.com/id/1041457; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8266
CVE: CVE-2018-8273
Published: 2018-08-15
Description: A buffer overflow vulnerability exists in the Microsoft SQL Server that could allow remote code execution on an affected system, aka "Microsoft SQL Server Remote Code Execution Vulnerability." This affects Microsoft SQL Server.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: http://www.securityfocus.com/bid/104967; http://www.securitytracker.com/id/1041467; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8273
CVE: CVE-2018-8302
Published: 2018-08-15
Description: A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka "Microsoft Exchange Memory Corruption Vulnerability." This affects Microsoft Exchange Server.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: http://www.securityfocus.com/bid/104973; http://www.securitytracker.com/id/1041468; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8302
CVE: CVE-2018-8316
Published: 2018-08-15
Description: A remote code execution vulnerability exists when Internet Explorer improperly validates hyperlinks before loading executable libraries, aka "Internet Explorer Remote Code Execution Vulnerability." This affects Internet Explorer 11, Internet Explorer 10.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://www.securityfocus.com/bid/105013; http://www.securitytracker.com/id/1041483; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8316
CVE: CVE-2018-8339
Published: 2018-08-15
Description: An elevation of privilege vulnerability exists in the Windows Installer when the Windows Installer fails to properly sanitize input leading to an insecure library loading behavior, aka "Windows Installer Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.
CVSS Score: 7.0 (HIGH)
CWE: CWE-20
References: http://www.securityfocus.com/bid/105030; http://www.securitytracker.com/id/1041466; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8339
CVE: CVE-2018-8340
Published: 2018-08-15
Description: A security feature bypass vulnerability exists when Active Directory Federation Services (AD FS) improperly handles multi-factor authentication requests, aka "AD FS Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows Server 2012 R2, Windows 10 Servers.
CVSS Score: 6.5 (MEDIUM)
References: http://www.securityfocus.com/bid/105029; http://www.securitytracker.com/id/1041474; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8340
CVE: CVE-2018-8341
Published: 2018-08-15
Description: An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-8348.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/104987; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8341; http://www.securityfocus.com/bid/104987
CVE: CVE-2018-8342
Published: 2018-08-15
Description: An elevation of privilege vulnerability exists in the Network Driver Interface Specification (NDIS) when ndis.sys fails to check the length of a buffer prior to copying memory to it, aka "Windows NDIS Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2008 R2. This CVE ID is unique from CVE-2018-8343.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120
References: http://www.securityfocus.com/bid/104975; http://www.securitytracker.com/id/1041466; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8342
CVE: CVE-2018-8343
Published: 2018-08-15
Description: An elevation of privilege vulnerability exists in the Network Driver Interface Specification (NDIS) when ndis.sys fails to check the length of a buffer prior to copying memory to it, aka "Windows NDIS Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-8342.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120
References: http://www.securityfocus.com/bid/104982; http://www.securitytracker.com/id/1041466; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8343
CVE: CVE-2018-8344
Published: 2018-08-15
Description: A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka "Microsoft Graphics Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94
References: http://www.securityfocus.com/bid/104983; http://www.securitytracker.com/id/1041475; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8344
CVE: CVE-2018-8345
Published: 2018-08-15
Description: A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed, aka "LNK Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-8346.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://www.securityfocus.com/bid/105027; http://www.securitytracker.com/id/1041473; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8345
CVE: CVE-2018-8346
Published: 2018-08-15
Description: A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed, aka "LNK Remote Code Execution Vulnerability." This affects Windows Server 2008, Windows 7, Windows Server 2008 R2. This CVE ID is unique from CVE-2018-8345.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94
References: http://www.securityfocus.com/bid/105028; http://www.securitytracker.com/id/1041473; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8346
CVE: CVE-2018-8347
Published: 2018-08-15
Description: An elevation of privilege vulnerability exists in Microsoft Windows when the Windows kernel fails to properly handle parsing of certain symbolic links, aka "Windows Kernel Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/104988; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8347; http://www.securityfocus.com/bid/104988
CVE: CVE-2018-8348
Published: 2018-08-15
Description: An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-8341.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/104992; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8348; http://www.securityfocus.com/bid/104992
CVE: CVE-2018-8349
Published: 2018-08-15
Description: A remote code execution vulnerability exists in "Microsoft COM for Windows" when it fails to properly handle serialized objects, aka "Microsoft COM for Windows Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.
CVSS Score: 8.8 (HIGH)
CWE: CWE-502
References: http://www.securityfocus.com/bid/104984; http://www.securitytracker.com/id/1041466; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8349
CVE: CVE-2018-8350
Published: 2018-08-15
Description: A remote code execution vulnerability exists when Microsoft Windows PDF Library improperly handles objects in memory, aka "Windows PDF Remote Code Execution Vulnerability." This affects Windows 10 Servers, Windows 10.
CVSS Score: 8.8 (HIGH)
References: http://www.securityfocus.com/bid/104985; http://www.securitytracker.com/id/1041465; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8350
CVE: CVE-2018-8351
Published: 2018-08-15
Description: An information disclosure vulnerability exists when affected Microsoft browsers improperly allow cross-frame interaction, aka "Microsoft Browser Information Disclosure Vulnerability." This affects Internet Explorer 11, Microsoft Edge, Internet Explorer 10.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-829
References: http://www.securityfocus.com/bid/105015; http://www.securitytracker.com/id/1041457; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8351
CVE: CVE-2018-8353
Published: 2018-08-15
Description: A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripting Engine Memory Corruption Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10. This CVE ID is unique from CVE-2018-8355, CVE-2018-8359, CVE-2018-8371, CVE-2018-8372, CVE-2018-8373, CVE-2018-8385, CVE-2018-8389, CVE-2018-8390.
CVSS Score: 7.5 (HIGH)
CWE: CWE-416
References: http://www.securityfocus.com/bid/105034; http://www.securitytracker.com/id/1041483; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8353
CVE: CVE-2018-8355
Published: 2018-08-15
Description: A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge. This CVE ID is unique from CVE-2018-8353, CVE-2018-8359, CVE-2018-8371, CVE-2018-8372, CVE-2018-8373, CVE-2018-8385, CVE-2018-8389, CVE-2018-8390.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/104978; http://www.securitytracker.com/id/1041457; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8355
CVE: CVE-2018-8357
Published: 2018-08-15
Description: An elevation of privilege vulnerability exists in Microsoft browsers allowing sandbox escape, aka "Microsoft Browser Elevation of Privilege Vulnerability." This affects Internet Explorer 11, Microsoft Edge.
CVSS Score: 8.3 (HIGH)
References: http://www.securityfocus.com/bid/105022; http://www.securitytracker.com/id/1041457; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8357
CVE: CVE-2018-8358
Published: 2018-08-15
Description: A security feature bypass vulnerability exists when Microsoft Edge improperly handles redirect requests, aka "Microsoft Edge Security Feature Bypass Vulnerability." This affects Microsoft Edge.
CVSS Score: 4.3 (MEDIUM)
References: http://www.securityfocus.com/bid/105017; http://www.securitytracker.com/id/1041457; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8358
CVE: CVE-2018-8359
Published: 2018-08-15
Description: A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore. This CVE ID is unique from CVE-2018-8353, CVE-2018-8355, CVE-2018-8371, CVE-2018-8372, CVE-2018-8373, CVE-2018-8385, CVE-2018-8389, CVE-2018-8390.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/104990; http://www.securitytracker.com/id/1041457; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8359