CVE-2018-8145

CVE-2018-8145 is an information disclosure vulnerability in the Chakra Scripting Engine that affects ChakraCore, Internet Explorer 10/11, and Microsoft Edge, potentially disclosing memory contents to an attacker. This vulnerability has a CVSS score of 7.5 (High) due to its network-based attack vector, high impact on confidentiality, integrity, and availability, but requires high attack complexity and user interaction. While not listed in CISA KEV, an ExploitDB entry exists for a related Chakra JIT out-of-bounds read/write, and it has garnered significant community discussion and media coverage, indicating potential for exploitation.