CVE-2018-8512

5.4 mediumEPSS 3.5%

A security feature bypass vulnerability exists in Microsoft Edge when the Edge Content Security Policy (CSP) fails to properly validate certain specially crafted documents, aka "Microsoft Edge Security Feature Bypass Vulnerability." This affects Microsoft Edge. This CVE ID is unique from CVE-2018-8530.

Severity

CVSS 3.0

5.4 medium

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

EPSS: 3.5% chance of exploitation in the next 30 days; higher than 89% of CVEs (scores of 2026-10-31)
CWE: CWE-20
Published: 2018-10-10
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

microsoft:edge

References

http://www.securityfocus.com/bid/105486
http://www.securitytracker.com/id/1041825
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8512
http://www.securityfocus.com/bid/105486
http://www.securitytracker.com/id/1041825

Check your stack JSON