CVE-2018-8617

CVE-2018-8617 is a critical remote code execution vulnerability residing in the Chakra scripting engine, affecting Microsoft Edge and ChakraCore, as well as various Windows operating systems. This memory corruption flaw carries a high CVSS score of 7.5, indicating a network-based attack requiring user interaction, with potential for high impact on confidentiality, integrity, and availability. While not actively exploited as a zero-day, exploit code for a type confusion vulnerability in Chakra, related to "InlineArrayPush," is publicly available on ExploitDB. The vulnerability has garnered significant community attention and media coverage, including a mention in a BleepingComputer article regarding Microsoft's December 2018 Patch Tuesday.