CVE-2018-0998

Опубликовано: 12 апр. 2018

Источник: nvd

CVSS3: 4.3

CVSS2: 4.3

EPSS Низкий

Описание

An information disclosure vulnerability exists when Microsoft Edge PDF Reader improperly handles objects in memory, aka "Microsoft Edge Information Disclosure Vulnerability." This affects Microsoft Edge. This CVE ID is unique from CVE-2018-0892.

Ссылки

http://www.securityfocus.com/bid/103598
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1040650
Third Party Advisory
VDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0998
Patch
Vendor Advisory
http://www.securityfocus.com/bid/103598
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1040650
Third Party Advisory
VDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0998
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*

Одно из

cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*

EPSS

Процентиль: 91%

0.06705

Низкий

4.3 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

CVE-2018-0998

CVSS3: 4.3

msrc

около 7 лет назад

Microsoft Edge PDF Information Disclosure Vulnerability

GHSA-rpc6-p2hj-p63g

CVSS3: 4.3

github

около 3 лет назад

EPSS

Процентиль: 91%

0.06705

Низкий

4.3 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

NVD-CWE-noinfo