Início
Tendências
Vulnerabilidades
Notícias
Pesquisadores
Por que dbugs?

Seonunghardt

Pesquisador deStealien
#32736de 53,634
7.8CVSS total
Vulnerabilidades · 1
PT-2018-1484
7.8
2018-08-14
Microsoft · Internet Explorer 10 · CVE-2018-8351
**Name of the Vulnerable Software and Affected Versions** Internet Explorer 11 Microsoft Edge Internet Explorer 10 **Description** The issue is related to errors in the implementation of cross-frame interaction in Microsoft browsers. It allows a remote attacker to disclose protected information using a specially crafted web page. An attacker who successfully exploits this issue could obtain browser frame or window state from a different domain. **Recommendations** For Internet Explorer 11, update to a version that properly restricts cross-frame interaction. For Microsoft Edge, update to a version that properly restricts cross-frame interaction. For Internet Explorer 10, update to a version that properly restricts cross-frame interaction. As a temporary workaround, consider restricting access to sensitive information when using affected browsers until a patch is available.