CVE-2018-8291

CVE-2018-8291 is a remote code execution vulnerability stemming from memory corruption in the scripting engine of Microsoft browsers, specifically affecting ChakraCore, Internet Explorer 11, and Microsoft Edge across various Windows operating systems. This vulnerability carries a CVSS score of 7.5 (HIGH), indicating that an unauthenticated attacker could achieve high impact on confidentiality, integrity, and availability with high attack complexity, requiring user interaction. While not listed in CISA's KEV catalog, a public exploit (EDB-45215) demonstrating a type confusion in Microsoft Edge Chakra JIT exists. Despite this, there is limited community discussion and media coverage, and it is not currently considered active on any hot lists.