7.6
CVSSv2

CVE-2018-8373

Published: 15/08/2018 Updated: 24/08/2020
CVSS v2 Base Score: 7.6 | Impact Score: 10 | Exploitability Score: 4.9
CVSS v3 Base Score: 7.5 | Impact Score: 5.9 | Exploitability Score: 1.6
VMScore: 677
Vector: AV:N/AC:H/Au:N/C:C/I:C/A:C

Vulnerability Summary

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripting Engine Memory Corruption Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10. This CVE ID is unique from CVE-2018-8353, CVE-2018-8355, CVE-2018-8359, CVE-2018-8371, CVE-2018-8372, CVE-2018-8385, CVE-2018-8389, CVE-2018-8390.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

microsoft internet_explorer 11

microsoft internet_explorer 10

microsoft internet_explorer 9

Github Repositories

HWP's Javascript parser

HWP parser 어떤 기능을 하는가? hwp 파일에 담겨있는 JavaScript 항목을 추출해 주는 도구입니다 어떻게 사용하는가? 입력 >> python hwp-parserpy [hwp 확장자 파일명] ex) >> python hwp-parserpy macro1hwp 출력 ex) magic number: b'\xd0\xcf\x11\xe0\xa1\xb1\x1a\xe

Config files for my GitHub profile.

👋 Hi, I’m @mohamed45237 👀 I’m interested in 🌱 I’m currently learning 💞️ I’m looking to collaborate on 📫 How to reach me 所有收集类项目 RAT 250+ 开源远控/C&C工具,1200+ RAT分析报告\C&C相关文章等。 English Version 目录 开源工具 pupy -> (1)工具 (6)文章 Covenant

Recent Articles

IT threat evolution Q3 2018. Statistics
Securelist • Victor Chebyshev Fedor Sinitsyn Denis Parinov Oleg Kupreev Evgeny Lopatin Alexander Liskin • 12 Nov 2018

These statistics are based on detection verdicts of Kaspersky Lab products received from users who consented to provide statistical data. According to Kaspersky Security Network: Perhaps the biggest news of the reporting period was the Trojan-Banker.AndroidOS.Asacub epidemic. It peaked in September when more than 250,000 unique users were attacked – and that only includes statistics for those with Kaspersky Lab’s mobile products installed on their devices. Number of users attacked by the mob...

Patch Tuesday heats up with pair of exploited zero-days squashed – plus 58 other vulns fixed
The Register • Shaun Nichols in San Francisco • 14 Aug 2018

Summertiiiiiime, and the hacking is easy Oracle: Run, don't walk, to patch this critical Database takeover bug

Microsoft and Adobe have teamed up to deliver more than 70 patches with this month's Patch Tuesday batch released today. Microsoft contributed the bulk of the fixes emitted this month, kicking out updates for 60 CVE-listed vulnerabilities in its products. These should be installed as soon as you're able to test and deploy them. Among the highest priorities are a pair of zero-day bugs that are right now being exploited in the wild to compromise victims' Windows PCs. CVE-2018-8373, a remote code e...