7.5high
CVE-2018-8464in critical feed
An remote code execution vulnerability exists when Microsoft Edge PDF Reader improperly handles objects in memory, aka "Microsoft Edge PDF…
Published 8 y ago · modified 4 mo ago · JSON
CVSS
7.5
v3.0 · NVD
CISA KEV
No
not known exploited
EPSS
42.6%
percentile 99%
Public exploits
0
none known
Summary
An remote code execution vulnerability exists when Microsoft Edge PDF Reader improperly handles objects in memory, aka "Microsoft Edge PDF Remote Code Execution Vulnerability." This affects Microsoft Edge.
Exploit prediction (EPSS)
42.58% probability of exploitation in the next 30 days, higher than 99% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 3.0 | 7.5 | CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H |
| NVD | 2.0 | 9.3 | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Affected products
- Microsoft Microsoft Edge
Classification
- Weakness
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
References
- securityfocus.com /bid/105265 · vdb-entry, x_refsource_BID, x_transferred
- portal.msrc.microsoft.com /en-US/security-guidance/advisory/CVE-2018-8464 · x_refsource_CONFIRM, x_transferred
- securitytracker.com /id/1041623 · vdb-entry, x_refsource_SECTRACK, x_transferred
- research.checkpoint.com /2018/50-adobe-cves-in-50-days/ · x_refsource_MISC, x_transferred
Sources
- CVE List: CVE-2018-8464
- NVD: CVE-2018-8464
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.