vulnerability
Microsoft Windows: CVE-2018-8452: Scripting Engine Information Disclosure Vulnerability
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 4 | (AV:N/AC:M/Au:N/C:P/I:N/A:N) | Sep 11, 2018 | Sep 11, 2018 | Sep 10, 2025 |
Severity
4
CVSS
(AV:N/AC:M/Au:N/C:P/I:N/A:N)
Published
Sep 11, 2018
Added
Sep 11, 2018
Modified
Sep 10, 2025
Description
An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory in Microsoft browsers, aka "Scripting Engine Information Disclosure Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge.
Solutions
microsoft-windows-windows_10-1507-kb4457132microsoft-windows-windows_10-1607-kb4457131microsoft-windows-windows_10-1703-kb4457138microsoft-windows-windows_10-1709-kb4457142microsoft-windows-windows_10-1803-kb4457128microsoft-windows-windows_server_2016-1607-kb4457131msft-kb4457426-3914b179-b4d0-43d0-bdcf-688c06884bedmsft-kb4457426-3ffe3622-fdd7-4a3c-bb79-8b7d20fddb8fmsft-kb4457426-5d7f0c60-87a5-4b29-94de-dfbb2ed05753msft-kb4457426-9a2425b0-c211-4443-ab53-8da9c032c9f3msft-kb4457426-9f288f0c-8837-4e5b-b5d4-ad619575f311msft-kb4457426-9ffa21a2-c734-444f-b690-883a9bca9735msft-kb4457426-a2fcdbe6-424a-4b14-b45a-56d5eb546df4msft-kb4457426-bb7481f4-d353-43ef-a77c-21717c175a94msft-kb4457426-d8ae1927-a62c-4cd4-893f-3ab4779c9263msft-kb4457426-f1025c0a-d38f-4923-9c1e-98f63f6d8b2e
References
- BID-105252
- CVE-2018-8452
- https://attackerkb.com/topics/CVE-2018-8452
- CWE-200
- URL-https://support.microsoft.com/help/4457128
- URL-https://support.microsoft.com/help/4457131
- URL-https://support.microsoft.com/help/4457132
- URL-https://support.microsoft.com/help/4457138
- URL-https://support.microsoft.com/help/4457142
- URL-https://support.microsoft.com/help/4457426
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.