{
  "cveId": "CVE-2018-8276",
  "url": "https://patchblox.com/security/cve/CVE-2018-8276",
  "summary": "CVE-2018-8276 is fixed in 6 products on 1 platform, first by KB4338826, released July 10, 2018. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "Scripting Engine Security Feature Bypass Vulnerability",
  "description": "\u003Cp\u003EA security feature bypass vulnerability exists in the Microsoft Chakra scripting engine that allows Control Flow Guard (CFG) to be bypassed. By itself, the CFG bypass vulnerability does not allow arbitrary code execution. However, an attacker could use the CFG bypass vulnerability in conjunction with another vulnerability, such as a remote code execution vulnerability, to run arbitrary code on a target system.\u003C/p\u003E\n\u003Cp\u003ETo exploit the CFG bypass vulnerability, a user must be logged on to the Microsoft Chakra scripting engine and running it. The user would then need to browse to a malicious website.\u003C/p\u003E\n\u003Cp\u003EThe security update addresses the CFG bypass vulnerability by helping to ensure that the Microsoft Chakra scripting engine properly handles accessing memory.\u003C/p\u003E",
  "published": "2018-07-10T07:00:00Z",
  "severity": "Important",
  "cvss": 4.3,
  "epss": 0.0577,
  "epssPercentile": 0.93133,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "exploitabilityAssessment": "Exploitation Less Likely",
  "vendorAdvisory": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2018-8276",
  "fixes": [
    {
      "platform": "microsoft",
      "product": "Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1703 for 32-bit Systems",
      "fixedVersion": "15063.1209",
      "fix": "KB4345419",
      "url": "https://patchblox.com/security/fix/microsoft/kb4345419",
      "released": "2018-07-16T00:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1703 for 32-bit Systems",
      "fixedVersion": "15063.1206",
      "fix": "KB4338826",
      "url": "https://patchblox.com/security/fix/microsoft/kb4338826",
      "released": "2018-07-10T00:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1703 for x64-based Systems",
      "fixedVersion": "15063.1209",
      "fix": "KB4345419",
      "url": "https://patchblox.com/security/fix/microsoft/kb4345419",
      "released": "2018-07-16T00:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1703 for x64-based Systems",
      "fixedVersion": "15063.1206",
      "fix": "KB4338826",
      "url": "https://patchblox.com/security/fix/microsoft/kb4338826",
      "released": "2018-07-10T00:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1709 for 32-bit Systems",
      "fixedVersion": "16299.551",
      "fix": "KB4345420",
      "url": "https://patchblox.com/security/fix/microsoft/kb4345420",
      "released": "2018-07-16T00:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1709 for 32-bit Systems",
      "fixedVersion": "16299.547",
      "fix": "KB4338825",
      "url": "https://patchblox.com/security/fix/microsoft/kb4338825",
      "released": "2018-07-10T00:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1709 for x64-based Systems",
      "fixedVersion": "16299.551",
      "fix": "KB4345420",
      "url": "https://patchblox.com/security/fix/microsoft/kb4345420",
      "released": "2018-07-16T00:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1709 for x64-based Systems",
      "fixedVersion": "16299.547",
      "fix": "KB4338825",
      "url": "https://patchblox.com/security/fix/microsoft/kb4338825",
      "released": "2018-07-10T00:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for 32-bit Systems",
      "fixedVersion": "17134.167",
      "fix": "KB4345421",
      "url": "https://patchblox.com/security/fix/microsoft/kb4345421",
      "released": "2018-07-16T00:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for 32-bit Systems",
      "fixedVersion": "17134.165",
      "fix": "KB4338819",
      "url": "https://patchblox.com/security/fix/microsoft/kb4338819",
      "released": "2018-07-10T00:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for x64-based Systems",
      "fixedVersion": "17134.167",
      "fix": "KB4345421",
      "url": "https://patchblox.com/security/fix/microsoft/kb4345421",
      "released": "2018-07-16T00:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for x64-based Systems",
      "fixedVersion": "17134.165",
      "fix": "KB4338819",
      "url": "https://patchblox.com/security/fix/microsoft/kb4338819",
      "released": "2018-07-10T00:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-07T18:46:35Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}