CVE-2018-0763 — Sensitive Information Exposure in Corporation Microsoft Edge

CWE-200 — Sensitive Information Exposure11 documents6 sources

Severity

3.1LOWNVD

EPSS

13.8%

top 5.71%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Microsoft Corporation Microsoft Edge

Timeline

PublishedFeb 15

Latest updateMay 14

Description

Microsoft Edge in Microsoft Windows 10 1703 and 1709 allows information disclosure, due to how Edge handles objects in memory, aka "Microsoft Edge Information Disclosure Vulnerability". This CVE ID is unique from CVE-2018-0839.

CVSS vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:NExploitability: 1.6 | Impact: 1.4

Affected Packages1 packages

▶CVEListV5microsoft_corporation/microsoft_edgeMicrosoft Windows 10 1703, Microsoft Windows 10 1703 and 1709.+1

Patches

Patch: portal.msrc.microsoft.com ↗Patch: portal.msrc.microsoft.com ↗

🔴Vulnerability Details

GHSA

GHSA-rjmw-ww3x-56j3: Microsoft Edge in Microsoft Windows 10 1703 and 1709 allows information disclosure, due to how Edge handles objects in memory, aka "Microsoft Edge Inf↗2022-05-14

▶

CVEList

CVE-2018-0763: Microsoft Edge in Microsoft Windows 10 1703 and 1709 allows information disclosure, due to how Edge handles objects in memory, aka "Microsoft Edge Inf↗2018-02-15

▶

📋Vendor Advisories

Microsoft

Microsoft Edge Memory Corruption Vulnerability↗2018-02-13

▶