CVE-2018-8298

CVE-2018-8298 is a remote code execution vulnerability in the ChakraCore scripting engine, specifically a memory corruption flaw affecting Microsoft ChakraCore. This vulnerability has a high CVSS score of 7.5, indicating a network-based attack with high impact on confidentiality, integrity, and availability, though it requires user interaction and has high attack complexity. It is actively exploited in the wild, as confirmed by its presence in the KEV catalog, and has garnered significant community attention and media coverage. While no Metasploit or Nuclei exploits are publicly available, an ExploitDB entry details a type confusion exploit for Microsoft Edge Chakra JIT.