CVE-2018-8551

CVE-2018-8551 is a remote code execution vulnerability in the Chakra scripting engine affecting Microsoft Edge, ChakraCore, and Windows 10/Server 2019. It stems from how the engine handles objects in memory, allowing an attacker to execute arbitrary code. The vulnerability carries a high CVSS score of 7.5, indicating a severe impact with high confidentiality, integrity, and availability compromise, though it requires user interaction and has high attack complexity. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or inclusion in CISA's KEV catalog, with limited community discussion and media coverage.