PT-2018-2017
CVE-2018-8291
·
Published
2018-07-10
·
Updated
2025-10-28
Description by
CVSS 2.0
7.6
HighMetricsAV:N/AC:H/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Microsoft Edge and Internet Explorer 11 (affected versions not specified)
Description
The issue is related to errors in the mechanisms for processing objects in memory in Microsoft browsers. Exploitation of this issue could allow a remote attacker to execute arbitrary code with the privileges of the current user by using specially crafted web page content. If the current user has administrative rights, a successful exploitation could allow the attacker to gain control of the affected system, enabling them to install programs, view, change, or delete data, or create new accounts with full user rights.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾