Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2018-8567

An elevation of privilege vulnerability exists when Microsoft Edge does not properly enforce cross-domain policies, which could allow an attacker to access information from one domain and inject it into another domain, aka "Microsoft Edge Elevation of Privilege Vulnerability." This affects Microsoft Edge.

Published

2018-11-14T01:29:01.583

Last Modified

2024-11-21T04:14:03.290

Status

Modified

Source

[email protected]

Severity

CVSSv3.0: 5.4 (MEDIUM)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:P/I:P/A:N

Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality Impact: PARTIAL
Integrity Impact: PARTIAL
Availability Impact: NONE

Exploitability Score

8.6

Impact Score

4.9

Weaknesses

Type: Primary
NVD-CWE-noinfo

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	microsoft	edge	-	Yes
Application	microsoft	windows_server	2019	No
Operating System	microsoft	windows_10	1709	No
Operating System	microsoft	windows_10	1803	No
Operating System	microsoft	windows_10	1809	No

References

http://www.securityfocus.com/bid/105784 Third Party Advisory, VDB Entry ([email protected])
http://www.securitytracker.com/id/1042107 Third Party Advisory, VDB Entry ([email protected])
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8567 Patch, Vendor Advisory ([email protected])
http://www.securityfocus.com/bid/105784 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://www.securitytracker.com/id/1042107 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8567 Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)