CVE-2018-8452

4.3 mediumEPSS 5.6%

An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory in Microsoft browsers, aka "Scripting Engine Information Disclosure Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge.

Severity

CVSS 3.0

4.3 medium

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

EPSS: 5.6% chance of exploitation in the next 30 days; higher than 92% of CVEs (scores of 2026-10-31)
CWE: CWE-200
Published: 2018-09-13
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

microsoft:chakracore
microsoft:edge
microsoft:internet_explorer

References

http://www.securityfocus.com/bid/105252
http://www.securitytracker.com/id/1041623
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8452
http://www.securityfocus.com/bid/105252
http://www.securitytracker.com/id/1041623

Check your stack JSON