{"action":"Upgrade Microsoft.ChakraCore to 1.10.1 or later.","affected":[{"fixed":"1.10.1","introduced":"0"}],"component":"Microsoft.ChakraCore","cve_ids":["CVE-2018-8298"],"ecosystem":"NuGet","epss":0.74694,"exploited":true,"fixed_versions":["1.10.1"],"ghsa_id":"GHSA-wgw2-wwq8-c7wf","id":"tcs_01M5N93V86H3G1FTWF4GMQVHM4","modified_at":"2025-10-22T19:32:00.570549Z","published_at":"2022-05-13T01:20:46Z","references":["https://osv.dev/vulnerability/GHSA-wgw2-wwq8-c7wf","https://nvd.nist.gov/vuln/detail/CVE-2018-8298","https://github.com/chakra-core/ChakraCore/pull/5444","https://github.com/chakra-core/ChakraCore/commit/cb9957e2763c36dbd12afa5c9261465159e16c86","https://github.com/chakra-core/ChakraCore","https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8298","https://web.archive.org/web/20210124183835/http://www.securityfocus.com/bid/104639","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-8298","https://www.exploit-db.com/exploits/45217"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-wgw2-wwq8-c7wf","url":"https://osv.dev/vulnerability/GHSA-wgw2-wwq8-c7wf"},{"source":"kev","source_id":"CVE-2018-8298","url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json"}],"summary":"ChakraCore RCE Vulnerability"}