CVE-2018-8126

Опубликовано: 09 мая 2018

Источник: nvd

CVSS3: 8.8

CVSS2: 6.8

EPSS Средний

Описание

A security feature bypass vulnerability exists when Internet Explorer fails to validate User Mode Code Integrity (UMCI) policies, aka "Internet Explorer Security Feature Bypass Vulnerability." This affects Internet Explorer 11.

Ссылки

http://www.securityfocus.com/bid/103997
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1040846
Third Party Advisory
VDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8126
Patch
Vendor Advisory
http://www.securityfocus.com/bid/103997
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1040846
Third Party Advisory
VDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8126
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:microsoft:internet_explorer:11:*:*:*:*:*:*:*

Одно из

cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*

EPSS

Процентиль: 94%

0.12871

Средний

8.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

CVE-2018-8126

CVSS3: 5.3

msrc

больше 7 лет назад

Internet Explorer Security Feature Bypass Vulnerability

GHSA-mv59-m2pm-94rh