Code

October 2018 Security Update#5764

Code

Merged

chakrabot merged 7 commits intochakra-core:release/1.10chakra-core/ChakraCore:release/1.10from thomasmo:1810thomasmo/ChakraCore:1810Copy head branch name to clipboardOct 9, 2018

+48-55

Commits

Commits on Oct 8, 2018

• [CVE-2018-8473] Edge - Chakra: Stack corruption in the presence of nested inlinees

  Show description for a278643
  

  paolosevMSFT

  authored and

  Thomas Moore (CHAKRA)

  committed
  a278643

  Copy full SHA for a278643

• [CVE-2018-8510] Edge - missing BytecodeUses for IsIn optimization leads to type confusion

  

  sigatrev

  authored and

  Thomas Moore (CHAKRA)

  committed
  9b36ce8

  Copy full SHA for 9b36ce8

• [CVE-2018-8503] Edge - RCE :Type Confusion Bug For Edge Bounty Program - Qihoo 360

  

  rajatd

  authored and

  Thomas Moore (CHAKRA)

  committed
  062b4d9

  Copy full SHA for 062b4d9

• [CVE-2018-8505] Edge - Chakra::TypeConfusion_8_16 JIT - Qihoo 360

  

  rajatd

  authored and

  Thomas Moore (CHAKRA)

  committed
  08f11df

  Copy full SHA for 08f11df

• [CVE-2018-8511] Edge - UAF of LdFld instruction in GlobOpt::prePassInstrMap, freed by path dependent branch folding - Internal

  

  rajatd

  authored and

  Thomas Moore (CHAKRA)

  committed
  f8aa306

  Copy full SHA for f8aa306

• [CVE-2018-8500] RCE after cleanup of jitted entry points

  

  pleath

  authored and

  Thomas Moore (CHAKRA)

  committed
  cd84a0b

  Copy full SHA for cd84a0b

• [CVE-2018-8513] Type confusion after converting accessor property to data

  

  pleath

  authored and

  Thomas Moore (CHAKRA)

  committed
  8997c70

  Copy full SHA for 8997c70