CVE-2018-0993

CVE-2018-0993 is a remote code execution vulnerability in the Chakra scripting engine affecting Microsoft Edge, Windows 10, and Windows Server 2016. The vulnerability stems from how the engine handles objects in memory, potentially allowing an attacker to execute arbitrary code. With a CVSS score of 7.5 (High), exploitation requires user interaction (e.g., clicking a malicious link) and has high impacts on confidentiality, integrity, and availability. While no public exploit code or active exploitation is confirmed, its EPSS score indicates a higher-than-average probability of exploitation. Community discussion and media coverage are limited, with only one article mentioning it as part of a larger patch Tuesday update.