CVEvulnerability
CVE-2018-8452
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2018-09-13
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 4.3 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-200
Description
An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory in Microsoft browsers, aka "Scripting Engine Information Disclosure Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge.
Affected configurations
• microsoft internet explorer 11
• microsoft chakracore
• microsoft edge
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- http://www.securityfocus.com/bid/105252 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1041623 Third Party Advisory, VDB Entry
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8452 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/105252 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1041623 Third Party Advisory, VDB Entry
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8452 Patch, Vendor Advisory