A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8354, CVE-2018-8391, CVE-2018-8456, CVE-2018-8457.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles
    objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge,
    ChakraCore. This CVE ID is unique from CVE-2018-8354, CVE-2018-8391, CVE-2018-8456, CVE-2018-8457.
    (CVE-2018-8459)

The remote Windows host is missing security update 4457128.
It is, therefore, affected by multiple vulnerabilities :

  - A remote code execution vulnerability exists in the way     the scripting engine handles objects in memory in     Microsoft browsers. The vulnerability could corrupt     memory in such a way that an attacker could execute     arbitrary code in the context of the current user. An     attacker who successfully exploited the vulnerability     could gain the same user rights as the current user.
    (CVE-2018-8457)

  - An information disclosure vulnerability exists when the     Windows GDI component improperly discloses the contents     of its memory. An attacker who successfully exploited     the vulnerability could obtain information to further     compromise the users system. There are multiple ways an     attacker could exploit the vulnerability, such as by     convincing a user to open a specially crafted document,     or by convincing a user to visit an untrusted webpage.
    The security update addresses the vulnerability by     correcting how the Windows GDI component handles objects     in memory. (CVE-2018-8424)

  - A remote code execution vulnerability exists when     Windows Hyper-V on a host server fails to properly     validate input from an authenticated user on a guest     operating system.  (CVE-2018-0965, CVE-2018-8439)

  - A remote code execution vulnerability exists when     Windows does not properly handle specially crafted image     files. An attacker who successfully exploited the     vulnerability could execute arbitrary code.
    (CVE-2018-8475)

  - An elevation of privilege vulnerability exists when     Windows improperly handles calls to Advanced Local     Procedure Call (ALPC). An attacker who successfully     exploited this vulnerability could run arbitrary code in     the security context of the local system. An attacker     could then install programs; view, change, or delete     data; or create new accounts with full user rights.
    (CVE-2018-8440)

  - An elevation of privilege vulnerability exists in     Windows that allows a sandbox escape. An attacker who     successfully exploited the vulnerability could use the     sandbox escape to elevate privileges on an affected     system. This vulnerability by itself does not allow     arbitrary code execution. However, the vulnerability     could allow arbitrary code to run if an attacker uses it     in combination with another vulnerability, such as a     remote code execution vulnerability or another elevation     of privilege vulnerability, that can leverage the     elevated privileges when code execution is attempted.
    The security update addresses the vulnerability by     correcting how Windows parses files. (CVE-2018-8468)

  - An information disclosure vulnerability exists when the     Windows kernel fails to properly initialize a memory     address. An attacker who successfully exploited this     vulnerability could obtain information to further     compromise the users system.  (CVE-2018-8419)

  - An elevation of privilege vulnerability exists when the     Windows Kernel API improperly handles registry objects     in memory. An attacker who successfully exploited the     vulnerability could gain elevated privileges on a     targeted system. A locally authenticated attacker could     exploit this vulnerability by running a specially     crafted application. The security update addresses the     vulnerability by helping to ensure that the Windows     Kernel API properly handles objects in memory.
    (CVE-2018-8410)

  - An elevation of privilege vulnerability exists when the     DirectX Graphics Kernel (DXGKRNL) driver improperly     handles objects in memory. An attacker who successfully     exploited this vulnerability could run processes in an     elevated context.  (CVE-2018-8462)

  - An information disclosure vulnerability exists when the     Windows kernel improperly handles objects in memory. An     attacker who successfully exploited this vulnerability     could obtain information to further compromise the users     system.  (CVE-2018-8446)

  - An elevation of privilege vulnerability exists in     Microsoft Edge that could allow an attacker to escape     from the AppContainer sandbox in the browser. An     attacker who successfully exploited this vulnerability     could gain elevated privileges and break out of the Edge     AppContainer sandbox. The vulnerability by itself does     not allow arbitrary code to run. However, this     vulnerability could be used in conjunction with one or     more vulnerabilities (for example a remote code     execution vulnerability and another elevation of     privilege vulnerability) to take advantage of the     elevated privileges when running. The security update     addresses the vulnerability by modifying how Microsoft     Edge handles sandboxing. (CVE-2018-8463, CVE-2018-8469)

  - A remote code execution vulnerability exists when the     Microsoft XML Core Services MSXML parser processes user     input. An attacker who successfully exploited the     vulnerability could run malicious code remotely to take     control of the users system.  (CVE-2018-8420)

  - An information disclosure vulnerability exists when the     Windows Graphics component improperly handles objects in     memory. An attacker who successfully exploited this     vulnerability could obtain information to further     compromise the users system. An authenticated attacker     could exploit this vulnerability by running a specially     crafted application. The update addresses the     vulnerability by correcting how the Windows Graphics     Component handles objects in memory. (CVE-2018-8433)

  - An information disclosure vulnerability exists when     Windows Hyper-V on a host operating system fails to     properly validate input from an authenticated user on a     guest operating system.  (CVE-2018-8434)

  - A remote code execution vulnerability exists when the     Windows font library improperly handles specially     crafted embedded fonts. An attacker who successfully     exploited this vulnerability could take control of the     affected system. An attacker could then install     programs; view, change, or delete data; or create new     accounts with full user rights.  (CVE-2018-8332)

  - An information disclosure vulnerability exists when the     Windows kernel improperly handles objects in memory. An     attacker who successfully exploited this vulnerability     could obtain information to further compromise the users     system. An authenticated attacker could exploit this     vulnerability by running a specially crafted     application. The update addresses the vulnerability by     correcting how the Windows kernel handles objects in     memory. (CVE-2018-8442, CVE-2018-8443, CVE-2018-8445)

  - An information disclosure vulnerability exists when the     browser scripting engine improperly handle object types.
    An attacker who has successfully exploited this     vulnerability might be able to read privileged data     across trust boundaries. In browsing scenarios, an     attacker could convince a user to visit a malicious site     and leverage the vulnerability to obtain privileged     information from the browser process, such as sensitive     data from other opened tabs. An attacker could also     inject malicious code into advertising networks used by     trusted sites or embed malicious code on a compromised,     but trusted, site. The security update addresses the     vulnerability by correcting how the browser scripting     engine handles object types. (CVE-2018-8315)

  - A remote code execution vulnerability exists when     Internet Explorer improperly accesses objects in memory.
    The vulnerability could corrupt memory in such a way     that an attacker could execute arbitrary code in the     context of the current user. An attacker who     successfully exploited the vulnerability could gain the     same user rights as the current user.  (CVE-2018-8447,     CVE-2018-8461)

  - A buffer overflow vulnerability exists in the Microsoft     JET Database Engine that could allow remote code     execution on an affected system. An attacker who     successfully exploited this vulnerability could take     control of an affected system. An attacker could then     install programs; view, change, or delete data; or     create new accounts with full user rights. Users whose     accounts are configured to have fewer user rights on the     system could be less impacted than users who operate     with administrative user rights.  (CVE-2018-8392,     CVE-2018-8393)

  - A denial of service vulnerability exists in the     Microsoft Server Block Message (SMB) when an attacker     sends specially crafted requests to the server. An     attacker who exploited this vulnerability could cause     the affected system to crash. To attempt to exploit this     issue, an attacker would need to send specially crafted     SMB requests to the target system. Note that the denial     of service vulnerability would not allow an attacker to     execute code or to elevate their user rights, but it     could cause the affected system to stop accepting     requests. The security update addresses the     vulnerability by correcting the manner in which SMB     handles specially crafted client requests.
    (CVE-2018-8335)

  - A denial of service vulnerability exists when Microsoft     Hyper-V Network Switch on a host server fails to     properly validate input from a privileged user on a     guest operating system. An attacker who successfully     exploited the vulnerability could cause the host server     to crash.  (CVE-2018-8436, CVE-2018-8437, CVE-2018-8438)

  - An elevation of privilege vulnerability exists in the     way that the Windows Kernel handles objects in memory.
    An attacker who successfully exploited the vulnerability     could execute code with elevated permissions.
    (CVE-2018-8455)

  - An elevation of privilege vulnerability exists due to an     integer overflow in Windows Subsystem for Linux. An     attacker who successfully exploited the vulnerability     could execute code with elevated permissions.
    (CVE-2018-8441)

  - An information disclosure vulnerability exists in     Windows when the Windows bowser.sys kernel-mode driver     fails to properly handle objects in memory. An attacker     who successfully exploited the vulnerability could     potentially disclose contents of System memory.
    (CVE-2018-8271)

  - A remote code execution vulnerability exists in the way     that the ChakraCore scripting engine handles objects in     memory. The vulnerability could corrupt memory in such a     way that an attacker could execute arbitrary code in the     context of the current user. An attacker who     successfully exploited the vulnerability could gain the     same user rights as the current user.  (CVE-2018-8456,     CVE-2018-8459)

  - An remote code execution vulnerability exists when     Microsoft Edge PDF Reader improperly handles objects in     memory. The vulnerability could corrupt memory in such a     way that enables an attacker to execute arbitrary code     in the context of the current user. An attacker who     successfully exploited the vulnerability could gain the     same user rights as the current user. If the current     user is logged on with administrative user rights, an     attacker could take control of an affected system. An     attacker could then install programs; view, change, or     delete data; or create new accounts with full user     rights.  (CVE-2018-8464)

  - An information disclosure vulnerability exists when the     Microsoft Edge Fetch API incorrectly handles a filtered     response type. An attacker could use the vulnerability     to read the URL of a cross-origin request. Websites that     that do not securely populate the URL with confidential     information could allow information to be disclosed to     an attacker.  (CVE-2018-8366)

  - A remote code execution vulnerability exists when     Microsoft .NET Framework processes input. An attacker     who successfully exploited this vulnerability could take     control of an affected system.  (CVE-2018-8421)

  - A remote code execution vulnerability exists in the way     that the Chakra scripting engine handles objects in     memory in Microsoft Edge. The vulnerability could     corrupt memory in such a way that an attacker could     execute arbitrary code in the context of the current     user. An attacker who successfully exploited the     vulnerability could gain the same user rights as the     current user.  (CVE-2018-8367, CVE-2018-8465,     CVE-2018-8466, CVE-2018-8467)

  - An information disclosure vulnerability exists when the     scripting engine does not properly handle objects in     memory in Microsoft browsers. An attacker who     successfully exploited the vulnerability could obtain     information to further compromise the users system.
    (CVE-2018-8452)

  - A security feature bypass exists when Device Guard     incorrectly validates an untrusted file. An attacker who     successfully exploited this vulnerability could make an     unsigned file appear to be signed. Because Device Guard     relies on the signature to determine the file is non-     malicious, Device Guard could then allow a malicious     file to execute. In an attack scenario, an attacker     could make an untrusted file appear to be a trusted     file. The update addresses the vulnerability by     correcting how Device Guard handles untrusted files.
    (CVE-2018-8449)

  - A security feature bypass vulnerability exists when     Windows Hyper-V BIOS loader fails to provide a high-     entropy source.  (CVE-2018-8435)

  - A remote code execution vulnerability exists in the way     that the scripting engine handles objects in memory in     Microsoft Edge. The vulnerability could corrupt memory     in such a way that an attacker could execute arbitrary     code in the context of the current user. An attacker who     successfully exploited the vulnerability could gain the     same user rights as the current user.  (CVE-2018-8354)

  - A security feature bypass vulnerability exists in     Internet Explorer due to how scripts are handled that     allows a universal cross-site scripting (UXSS)     condition. An attacker could use the UXSS vulnerability     to access any session belonging to web pages currently     opened (or cached) by the browser at the time the attack     is triggered.  (CVE-2018-8470)

  - A spoofing vulnerability exists when Microsoft Edge     improperly handles specific HTML content. An attacker     who successfully exploited this vulnerability could     trick a user into believing that the user was on a     legitimate website. The specially crafted website could     either spoof content or serve as a pivot to chain an     attack with other vulnerabilities in web services.
    (CVE-2018-8425)

ID	Name	Product	Family	Severity
433977	SCA: security update for Microsoft.ChakraCore (GHSA-pcgp-vfgq-mf5j)	Tenable Cloud Security	SCA Checks	high
433977	SCA: security update for Microsoft.ChakraCore (GHSA-pcgp-vfgq-mf5j)	Tenable Self-Hosted Container Security	SCA Checks	high
117411	KB4457128: Windows 10 Version 1803 and Windows Server Version 1803 September 2018 Security Update	Nessus	Windows : Microsoft Bulletins	critical

Detections

Analytics

CVE-2018-8459

high

Tenable Plugins

high

high

critical