KLA11264
Multiple vulnerabilities in Microsoft ChakraCore

Multiple serious vulnerabilities have been found in Microsoft ChakraCore. Malicious users can exploit these vulnerabilities to execute arbitrary code.

Below is a complete list of vulnerabilities:

1. An incorrect handling of objects in memory of Chakra scripting engine can be exploited locally via unspecified attack vector to execute arbitrary code;
2. Memory corruption vulnerability in ChakraCore scripting engine can be exploited locally via unspecified attack vector to execute arbitrary code.

ChakraCore

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

CVE-2018-8227
CVE-2018-8229
CVE-2018-8243