CVEvulnerability
CVE-2018-8619
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2018-12-12
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.5 HIGH — CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.6 HIGH — AV:N/AC:H/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-269
Description
A remote code execution vulnerability exists when the Internet Explorer VBScript execution policy does not properly restrict VBScript under specific conditions, aka "Internet Explorer Remote Code Execution Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10.
Affected configurations
• microsoft internet explorer 9
• microsoft internet explorer 10
• microsoft internet explorer 11
Related
Weakness · CWE (1)
- CWE-269 Improper Privilege Management weakness
References
- http://www.securityfocus.com/bid/106119 Third Party Advisory, VDB Entry
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8619 Patch, Vendor Advisory
- https://www.exploit-db.com/exploits/46023/ Exploit, Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/106119 Third Party Advisory, VDB Entry
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8619 Patch, Vendor Advisory
- https://www.exploit-db.com/exploits/46023/ Exploit, Third Party Advisory, VDB Entry