CVEvulnerability
CVE-2018-8315
4.2 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2018-09-13
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 4.2 MEDIUM — CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N
- CVSS 2.0 ([email protected])
- 4.0 MEDIUM — AV:N/AC:H/Au:N/C:P/I:P/A:N
- Weaknesses
- CWE-200
Description
An information disclosure vulnerability exists when the browser scripting engine improperly handle object types, aka "Microsoft Scripting Engine Information Disclosure Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge, Internet Explorer 10.
Affected configurations
• microsoft internet explorer 11
• microsoft internet explorer 10
• microsoft chakracore
• microsoft edge
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- http://www.securityfocus.com/bid/105251 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1041623 Third Party Advisory, VDB Entry
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8315 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/105251 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1041623 Third Party Advisory, VDB Entry
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8315 Patch, Vendor Advisory