CVEvulnerability
CVE-2018-8319
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2018-07-11
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 9.8 CRITICAL — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-682
Description
A Security Feature Bypass vulnerability exists in MSR JavaScript Cryptography Library that is caused by incorrect arithmetic computations, aka "MSR JavaScript Cryptography Library Security Feature Bypass Vulnerability." This affects Microsoft Research JavaScript Cryptography Library.
Affected configurations
• microsoft research javascript cryptography library 1.4
Related
Weakness · CWE (1)
- CWE-682 Incorrect Calculation weakness
References
- http://www.securityfocus.com/bid/104655 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1041268 Third Party Advisory, VDB Entry
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8319 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/104655 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1041268 Third Party Advisory, VDB Entry
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8319 Patch, Vendor Advisory