CVE-2018-0803

Опубликовано: 04 янв. 2018

Источник: nvd

CVSS3: 4.2

CVSS2: 5.8

EPSS Низкий

Описание

Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to access information from one domain and inject it into another domain, due to how Microsoft Edge enforces cross-domain policies, aka "Microsoft Edge Elevation of Privilege Vulnerability".

Ссылки

http://www.securityfocus.com/bid/102384
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1040100
Third Party Advisory
VDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0803
Patch
Vendor Advisory
http://www.securityfocus.com/bid/102384
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1040100
Third Party Advisory
VDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0803
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*

Одно из

cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*

EPSS

Процентиль: 87%

0.03626

Низкий

4.2 Medium

CVSS3

5.8 Medium

CVSS2

Дефекты

CWE-863

Связанные уязвимости

CVE-2018-0803

CVSS3: 3.1

msrc

больше 7 лет назад

Microsoft Edge Elevation of Privilege Vulnerability

GHSA-rc8x-g2jf-pcr5