CVE-2018-0840

CVE-2018-0840 is a critical remote code execution vulnerability affecting Internet Explorer and Microsoft Edge across various Windows versions, stemming from how the scripting engine handles objects in memory. This flaw allows an attacker to execute arbitrary code on a vulnerable system. The vulnerability carries a high CVSS score of 7.5, indicating a significant risk. Exploitation requires user interaction (e.g., visiting a malicious website) and has high impact on confidentiality, integrity, and availability. While not listed in CISA's KEV catalog, an ExploitDB entry exists for a related Chakra JIT bypass. Community discussion and media coverage suggest this vulnerability received notable attention, though active exploitation status is currently inactive.