What is CVE-2018-0934?

CVE-2018-0934 is a high-severity vulnerability in Microsoft Chakracore, classified under Improper Handling of Exceptional Conditions. CVSS score: 7.5/10. Published 2018-03-14.

How severe is CVE-2018-0934?

High severity. CVSS v3 base score is 7.5 out of 10.

Is CVE-2018-0934 known to be exploited?

7 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Buffer overflow in Microsoft Chakracore

CVE-2018-0934

ChakraCore and Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the Chakra scripting engine handles objects in memory, aka "Chakra Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0872, CVE-2018-0873, CVE-2018-0874, CVE-2018-0930, CVE-2018-0931, CVE-2018-0933, CVE-2018-0936, and CVE-2018-0937.

Published 2018-03-14 · last modified 2026-06-17.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H.

EPSS exploit prediction

EPSS: 0.662 (99.3th percentile), scored 2026-10-18.

High probability of exploitation in the next 30 days — patch promptly. 99th percentile — 99.3% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.614 · newest: 0.662 · change: +0.048

Affected products

Microsoft Chakracore
Microsoft Edge
Microsoft Windows 10 — versions 1511, 1607, 1703
Microsoft Windows Server 2016
Microsoft Corporation Chakracore, Edge — versions ChakraCore, Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016.

Weakness classification (CWE)

Public proof-of-concept exploits

References

portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0934 (Patch, Vendor Advisory)
www.exploit-db.com/exploits/44397/ (Exploit, VDB Entry, Third Party Advisory, exploit)
www.exploit-db.com/exploits/44396/ (Exploit, VDB Entry, Third Party Advisory, exploit)
www.securitytracker.com/id/1040507 (VDB Entry, Third Party Advisory, vdb-entry)
www.securityfocus.com/bid/103275 (VDB Entry, Third Party Advisory, vdb-entry)

Frequently asked questions

What is CVE-2018-0934?: CVE-2018-0934 is a high-severity vulnerability in Microsoft Chakracore, classified under Improper Handling of Exceptional Conditions. CVSS score: 7.5/10. Published 2018-03-14.
How severe is CVE-2018-0934?: High severity. CVSS v3 base score is 7.5 out of 10.
Is CVE-2018-0934 known to be exploited?: 7 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.