Vulnerability · NVD

CVE-2018-8315

CVE-2018-8315, medium severity (CVSS 4.2): 1 tracked app concerned, all fixed or indeterminable on their current version.

Severity (CVSS): 4.2
Exploitation: 3.1 %
Tracked apps: 1
Still exposed: 0

Published on 2018-09-13

An information disclosure vulnerability exists when the browser scripting engine improperly handle object types, aka "Microsoft Scripting Engine Information Disclosure Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge, Internet Explorer 10.

Attack vector : Network No privileges required

Show raw CVSS vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N

EPSS 3.12% above median percentile 86.9%

Tracked apps referencing this CVE

For each app: the affected range, the fixing version, and where the tracked app stands today.

Microsoft Edge Windows winget:Microsoft.Edge

Affected - Fixed in - Latest tracked 151.0.4129.107 undetermined

NVD references 10 distinct products for this CVE : only those tracked by Scout (mobile and desktop catalog apps) are listed above. Libraries, servers and out-of-scope products do not appear here. Full list on NVD ↗

Vulnerable CPE configurations (1)

Vendor	Product	Platform	Versions	CPE 2.3 URI
microsoft	edge All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:microsoft:edge:-:::::::*

View on NVD ↗ Advisory · portal.msrc.microsoft.com