PT-2018-2017

CVE-2018-8291

·

Published

2018-07-10

·

Updated

2025-10-28

Description by

CVSS 2.0
7.6
High
MetricsAV:N/AC:H/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Microsoft Edge and Internet Explorer 11 (affected versions not specified)
Description The issue is related to errors in the mechanisms for processing objects in memory in Microsoft browsers. Exploitation of this issue could allow a remote attacker to execute arbitrary code with the privileges of the current user by using specially crafted web page content. If the current user has administrative rights, a successful exploitation could allow the attacker to gain control of the affected system, enabling them to install programs, view, change, or delete data, or create new accounts with full user rights.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Researchers
Vendors
Affected products
Related identifiers
GHSA-J67M-WPV6-PV44
Found an issue in the description? Have something to add? Feel free to write us 👾