CVE-2018-8373

high · 7.5Actively exploited

On the CISA Known Exploited Vulnerabilities catalog

Apply updates per vendor instructions.

Added 2022-03-25Remediation due 2022-04-15

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripting Engine Memory Corruption Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10. This CVE ID is unique from CVE-2018-8353, CVE-2018-8355, CVE-2018-8359, CVE-2018-8371, CVE-2018-8372, CVE-2018-8385, CVE-2018-8389, CVE-2018-8390.

7.5

CVSS

61.9%

EPSS (exploit prob.)

99th

EPSS percentile

2018-08-15

Published

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Weaknesses

CWE-787

Affected products

Vendor	Product	Affected versions
microsoft	internet_explorer	11
microsoft	windows_10_1507	all versions
microsoft	windows_10_1507	all versions
microsoft	windows_10_1607	all versions
microsoft	windows_10_1607	all versions
microsoft	windows_10_1703	all versions
microsoft	windows_10_1703	all versions
microsoft	windows_10_1709	all versions
microsoft	windows_10_1709	all versions
microsoft	windows_10_1803	all versions
microsoft	windows_10_1803	all versions
microsoft	windows_7	all versions
microsoft	windows_8.1	all versions
microsoft	windows_rt_8.1	all versions
microsoft	windows_server_2008	r2
microsoft	windows_server_2012	r2
microsoft	windows_server_2016	all versions
microsoft	internet_explorer	10
microsoft	windows_server_2012	all versions
microsoft	internet_explorer	9
microsoft	windows_server_2008	all versions

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2018-8373