CVE-2018-8234 — Sensitive Information Exposure in Microsoft Edge

CWE-200 — Sensitive Information Exposure8 documents5 sources
Severity
4.3MEDIUMNVD
EPSS
11.4%
top 6.42%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Microsoft Edge
Timeline
PublishedJun 14
Latest updateMay 14

Description

An information disclosure vulnerability exists when Microsoft Edge improperly handles objects in memory, aka "Microsoft Edge Information Disclosure Vulnerability." This affects Microsoft Edge. This CVE ID is unique from CVE-2018-0871.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:NExploitability: 2.8 | Impact: 1.4

Affected Packages1 packages

▶CVEListV5microsoft/microsoft_edge11 versions+10

Patches

Patch: portal.msrc.microsoft.com ↗Patch: portal.msrc.microsoft.com ↗

🔴Vulnerability Details

4
GHSA
GHSA-4hg4-wwhp-32rq: An information disclosure vulnerability exists when Edge improperly marks files, aka "Microsoft Edge Information Disclosure Vulnerability↗2022-05-14
▶
GHSA
GHSA-j6jj-9hwx-98pj: An information disclosure vulnerability exists when Microsoft Edge improperly handles objects in memory, aka "Microsoft Edge Information Disclosure Vu↗2022-05-14
▶
CVEList
CVE-2018-8234: An information disclosure vulnerability exists when Microsoft Edge improperly handles objects in memory, aka "Microsoft Edge Information Disclosure Vu↗2018-06-14
▶
CVEList
CVE-2018-0871: An information disclosure vulnerability exists when Edge improperly marks files, aka "Microsoft Edge Information Disclosure Vulnerability↗2018-06-14
▶

📋Vendor Advisories

1
Microsoft
Microsoft Edge based on Edge HTML Information Disclosure Vulnerability↗2018-06-12
▶

🕵️Threat Intelligence

1
Talos
Microsoft Patch Tuesday - June 2018↗2018-06-12
▶
CVE-2018-8234 — Sensitive Information Exposure | cvebase