CVE-2018-8473

Опубликовано: 10 окт. 2018

Источник: nvd

CVSS3: 7.5

CVSS2: 7.6

EPSS Средний

Описание

A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8509.

Ссылки

http://www.securityfocus.com/bid/105459
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1041825
Third Party Advisory
VDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8473
Patch
Vendor Advisory
http://www.securityfocus.com/bid/105459
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1041825
Third Party Advisory
VDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8473
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:microsoft:chakracore:-:*:*:*:*:*:*:*

Конфигурация 2

Одновременно

cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*

Одно из

cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*

EPSS

Процентиль: 96%

0.14607

Средний

7.5 High

CVSS3

7.6 High

CVSS2

Дефекты

CWE-787

Связанные уязвимости

CVE-2018-8473

CVSS3: 4.2

msrc

почти 8 лет назад

Microsoft Edge Memory Corruption Vulnerability

GHSA-mw9g-9q6h-rwwq