CVE-2018-0939

4.3 mediumEPSS 5.5%

Medium (4.3) in microsoft edge. EPSS 5.5% chance of exploitation in the next 30 days.

ChakraCore and Microsoft Edge in Windows 10 1703 and 1709 allow information disclosure, due to how the scripting engine handles objects in memory, aka "Scripting Engine Information Disclosure Vulnerability". This CVE ID is unique from CVE-2018-0891.

Severity

CVSS 3.0

4.3 medium

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

EPSS: 5.5% chance of exploitation in the next 30 days; higher than 92% of CVEs (scores of 2026-10-31)
CWE: CWE-787
Published: 2018-03-14
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

microsoft:edge

References

http://www.securityfocus.com/bid/103305
http://www.securitytracker.com/id/1040507
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0939
http://www.securityfocus.com/bid/103305
http://www.securitytracker.com/id/1040507

Check your stack JSON