CVE-2018-8288

CVE-2018-8288 is a remote code execution vulnerability affecting Microsoft browsers (Internet Explorer 11, Microsoft Edge) and ChakraCore, stemming from how their scripting engines handle objects in memory. This memory corruption flaw could allow an attacker to execute arbitrary code. With a CVSS score of 7.5 (High), this vulnerability requires user interaction (e.g., clicking a malicious link) and has high impact on confidentiality, integrity, and availability. The attack complexity is high, but successful exploitation could lead to full system compromise. While not listed on the KEV catalog, an ExploitDB entry (EDB-45213) exists for a Microsoft Edge Chakra JIT bypass, indicating public exploit code availability. The vulnerability has garnered significant community discussion and media coverage, suggesting awareness among threat actors.