CVE-2018-8385

high · 7.5

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability." This affects Internet Explorer 9, ChakraCore, Internet Explorer 11, Microsoft Edge, Internet Explorer 10. This CVE ID is unique from CVE-2018-8353, CVE-2018-8355, CVE-2018-8359, CVE-2018-8371, CVE-2018-8372, CVE-2018-8373, CVE-2018-8389, CVE-2018-8390.

7.5

CVSS

14.2%

EPSS (exploit prob.)

96th

EPSS percentile

2018-08-15

Published

CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Weaknesses

CWE-787

Affected products

Vendor	Product	Affected versions
microsoft	internet_explorer	11
microsoft	windows_10	all versions
microsoft	windows_10	1607
microsoft	windows_10	1703
microsoft	windows_10	1709
microsoft	windows_10	1803
microsoft	windows_7	all versions
microsoft	windows_8.1	all versions
microsoft	windows_rt_8.1	all versions
microsoft	windows_server_2008	r2
microsoft	windows_server_2012	r2
microsoft	windows_server_2016	all versions
microsoft	internet_explorer	10
microsoft	windows_server_2012	all versions
microsoft	internet_explorer	9
microsoft	windows_server_2008	all versions
microsoft	chakracore	all versions
microsoft	edge	all versions
microsoft	windows_10	all versions
microsoft	windows_10	1607
microsoft	windows_10	1703
microsoft	windows_10	1709
microsoft	windows_10	1803
microsoft	windows_server_2016	all versions

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2018-8385