CVSS 3.0
9.8 criticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2018-8319
Critical (9.8) in microsoft research javascript cryptography library. EPSS 7.7% chance of exploitation in the next 30 days. Fixed in msrcrypto 1.4.1.
A Security Feature Bypass vulnerability exists in MSR JavaScript Cryptography Library that is caused by incorrect arithmetic computations, aka "MSR JavaScript Cryptography Library Security Feature Bypass Vulnerability." This affects Microsoft Research JavaScript Cryptography Library.
Severity
- EPSS
- 7.7% chance of exploitation in the next 30 days; higher than 94% of CVEs (scores of 2026-10-31)
- CWE
- CWE-682
- Published
- Modified
- Record from
- the NVD, synced
Affected
- microsoft:research_javascript_cryptography_library
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-qg3g-2mgh-33j8 | npm | msrcrypto | <1.4.1 | 1.4.1 |