← Back

CVE-2018-8425

nvd nist
Published: Sep 13, 2018Modified: Nov 21, 2024

JSON object

Loading...
4.3
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Exploitability: 2.8 / Impact: 1.4
Source: NVD

Description

A spoofing vulnerability exists when Microsoft Edge improperly handles specific HTML content, aka "Microsoft Edge Spoofing Vulnerability." This affects Microsoft Edge.

Affected (1)

Products: Microsoft: Edge
Microsoft
1 product
Edge
Configuration A
1 vulnerable · 6 platform
Vulnerable SoftwareAffected Versions
Edge
All versions
Running on/withPlatform Versions
Microsoft
Windows 10
All versions
Microsoft
Windows 10
Version 1607
Microsoft
Windows 10
Version 1703
Microsoft
Windows 10
Version 1709
Microsoft
Windows 10
Version 1803
Microsoft
Windows Server 2016
All versions

Related CWEs

CWE-290
Authentication Bypass by Spoofing
This attack-focused weakness is caused by incorrectly implemented authentication schemes that are subject to spoofing attacks.

References (6)

Source: secure@microsoft.com
Third Party AdvisoryVDB Entry
Source: secure@microsoft.com
Third Party AdvisoryVDB Entry
Source: secure@microsoft.com
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory

Timeline

No history available yet.