CVE-2018-0892

Опубликовано: 12 апр. 2018

Источник: nvd

CVSS3: 4.3

CVSS2: 4.3

EPSS Низкий

Описание

An information disclosure vulnerability exists when Microsoft Edge improperly handles objects in memory, aka "Microsoft Edge Information Disclosure Vulnerability." This affects Microsoft Edge. This CVE ID is unique from CVE-2018-0998.

Ссылки

http://www.securityfocus.com/bid/103636
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1040650
Third Party Advisory
VDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0892
Patch
Vendor Advisory
http://www.securityfocus.com/bid/103636
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1040650
Third Party Advisory
VDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0892
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*

Одно из

cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*

EPSS

Процентиль: 92%

0.08835

Низкий

4.3 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-200

Связанные уязвимости

CVE-2018-0892

CVSS3: 4.3

msrc

больше 7 лет назад

Microsoft Edge based on Edge HTML Information Disclosure Vulnerability

GHSA-j4p9-7455-7q9j

CVSS3: 4.3

github

больше 3 лет назад

EPSS

Процентиль: 92%

0.08835

Низкий

4.3 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-200