CVE-2018-8567: Medium severity microsoft edge beta vulnerability

Published Nov 14, 2018

Updated

An elevation of privilege vulnerability exists when Microsoft Edge does not properly enforce cross-domain policies, which could allow an attacker to access information from one domain and inject it into another domain, aka "Microsoft Edge Elevation of Privilege Vulnerability." This affects Microsoft Edge.

Affected Software

5 affected components

Microsoft Edge

Microsoft Windows Server=2019

Microsoft Windows 10=1709

Microsoft Windows 10=1803

Microsoft Windows 10=1809

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8567

Event History

Nov 14, 2018

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2018-8567?

CVE-2018-8567 has a severity rating of important as it could allow unauthorized access to sensitive information.

How do I fix CVE-2018-8567?

To mitigate CVE-2018-8567, ensure that Microsoft Edge is updated to the latest version available.

What systems are affected by CVE-2018-8567?

CVE-2018-8567 affects Microsoft Edge browsers on supported versions of Windows.

Can CVE-2018-8567 be exploited remotely?

Yes, CVE-2018-8567 can potentially be exploited remotely by an attacker through malicious web content.

What type of vulnerability is CVE-2018-8567?

CVE-2018-8567 is classified as an elevation of privilege vulnerability.