CVE-2018-8366

Опубликовано: 13 сент. 2018

Источник: nvd

CVSS3: 3.1

CVSS2: 2.6

EPSS Низкий

Описание

An information disclosure vulnerability exists when the Microsoft Edge Fetch API incorrectly handles a filtered response type, aka "Microsoft Edge Information Disclosure Vulnerability." This affects Microsoft Edge.

Ссылки

http://www.securityfocus.com/bid/105253
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1041623
Third Party Advisory
VDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8366
Patch
Vendor Advisory
http://www.securityfocus.com/bid/105253
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1041623
Third Party Advisory
VDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8366
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*

EPSS

Процентиль: 93%

0.09609

Низкий

3.1 Low

CVSS3

2.6 Low

CVSS2

Дефекты

CWE-200

Связанные уязвимости

CVE-2018-8366

CVSS3: 4.3

msrc

больше 7 лет назад

Microsoft Edge Information Disclosure Vulnerability

GHSA-m3qg-3g4c-5jwm