Information Disclosure Vulnerability in Microsoft Browsers Affecting ChakraCore and Edge
CVE-2018-8452
4.3MEDIUM
Key Information:
- Vendor
- Microsoft
- Vendor
- CVE Published:
- 13 September 2018
Summary
An information disclosure vulnerability was identified in Microsoft browsers due to improper handling of memory objects by the scripting engine. This flaw could allow an attacker to potentially exploit the vulnerability to gain access to sensitive information. Affected products include ChakraCore, Internet Explorer 11, and Microsoft Edge, which emphasizes the importance of prompt updates and the implementation of security best practices to mitigate the risks.
Affected Version(s)
ChakraCore ChakraCore
Internet Explorer 11 Windows 10 for 32-bit Systems
Internet Explorer 11 Windows 10 for x64-based Systems
References
CVSS V3.1
Score:
4.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved