CVE-2018-8324: Infoleak

Published Jul 11, 2018

Updated

An information disclosure vulnerability exists when Microsoft Edge improperly handles objects in memory, aka "Microsoft Edge Information Disclosure Vulnerability." This affects Microsoft Edge. This CVE ID is unique from CVE-2018-8289, CVE-2018-8297, CVE-2018-8325.

Affected Software

8 affected components

Microsoft Edge

Microsoft Windows 10=1703

Microsoft Windows 10=1709

Microsoft Windows 10=1803

All of the following

Microsoft Edge

Any of the following

Microsoft Windows 10=1703

Microsoft Windows 10=1709

Microsoft Windows 10=1803

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8324

Event History

Jul 11, 2018

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionWeakness

Data Sourced

via NVD·12:29 AM

RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What must an attacker do to exploit this vulnerability?

The attacker must cause a user to interact with malicious content. The CVSS vector indicates network-based exploitation with no attacker privileges required, but user interaction is required.

What is the potential impact if exploitation succeeds?

Successful exploitation can disclose information from memory. The listed CVSS impact is limited to confidentiality; integrity and availability are not affected.

Is a patch available?

Yes. A patch is available for the affected Microsoft Edge vulnerability.

CVE-2018-8324: Infoleak

Affected Software

Remediation

Patch Available

Event History

Frequently Asked Questions

What must an attacker do to exploit this vulnerability?

What is the potential impact if exploitation succeeds?

Is a patch available?

Company

Resources

Contact

Frequently Asked Questions

What must an attacker do to exploit this vulnerability?

What is the potential impact if exploitation succeeds?

Is a patch available?