CVE-2018-8355

CVE-2018-8355 is a remote code execution vulnerability in the scripting engine of Microsoft browsers, specifically affecting ChakraCore, Internet Explorer 11, and Microsoft Edge, as well as various Windows operating systems. This memory corruption flaw allows an attacker to execute arbitrary code. It carries a high CVSS score of 7.5, indicating a network-based attack requiring user interaction, with high impacts on confidentiality, integrity, and availability. While not listed on the KEV catalog, an ExploitDB entry exists for a Chakra JIT type confusion, and it has garnered significant community discussion and media coverage, though active exploitation is not confirmed.