CVE-2018-8625

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Remote Code Execution Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10.

Affected

Microsoft · Internet Explorer 9 · Internet Explorer 11 · Internet Explorer 10

CVSS v3.0 NVD

7.5 HIGHCVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

CVSS v2.0 NVD

7.6 HIGHAV:N/AC:H/Au:N/C:C/I:C/A:C

EPSS

43.76% chance of exploitation in the next 30 days, 99th percentile

Published

2018-12-12

Updated

2024-08-05

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/46022

Security advisories

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8625
• http://www.securityfocus.com/bid/106122

References

• CVE Record
• NVD entry