CVE-2018-8297: Infoleak
An information disclosure vulnerability exists when Microsoft Edge improperly handles objects in memory, aka "Microsoft Edge Information Disclosure Vulnerability." This affects Microsoft Edge. This CVE ID is unique from CVE-2018-8289, CVE-2018-8324, CVE-2018-8325.
Affected Software
Remediation
Event History
Frequently Asked Questions
What must an attacker do to exploit this issue?
The CVSS vector indicates the attack can be performed over a network with low complexity and requires no privileges, but it requires user interaction. This implies a user must interact with attacker-controlled content for exploitation to occur.
What is the likely impact if exploitation succeeds?
The stated impact is information disclosure, with low confidentiality impact and no integrity or availability impact in the CVSS vector. The issue concerns Microsoft Edge improperly handling objects in memory.
Is a fix available?
Yes. A patch is available for this vulnerability.