CVE-2018-0766

Опубликовано: 04 янв. 2018

Источник: nvd

CVSS3: 4.3

CVSS2: 4.3

EPSS Средний

Описание

Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to obtain information to further compromise the user's system, due to how the Microsoft Edge PDF Reader handles objects in memory, aka "Microsoft Edge Information Disclosure Vulnerability".

Ссылки

http://www.securityfocus.com/bid/102388
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1040100
Third Party Advisory
VDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0766
Patch
Vendor Advisory
http://www.securityfocus.com/bid/102388
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1040100
Third Party Advisory
VDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0766
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*

Одно из

cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*

EPSS

Процентиль: 93%

0.11302

Средний

4.3 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-200

Связанные уязвимости

CVE-2018-0766

CVSS3: 4.3

msrc

больше 7 лет назад

Microsoft Edge PDF Information Disclosure Vulnerability

GHSA-v97w-2r58-2wrr

CVSS3: 4.3

github

около 3 лет назад

EPSS

Процентиль: 93%

0.11302

Средний

4.3 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-200