PT-2018-1491 · Microsoft · Edge+2

James Lee + 2 · Publicado 2018-08-14 · Atualizado 2019-10-03 · CVE-2018-8357

Positive Technologies (AI Summary)

CVSS v3.1

8.3

Alta

Vetor base

AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Internet Explorer 11 Microsoft Edge

Description An elevation of privilege issue exists in Microsoft browsers, allowing sandbox escape. This could enable an attacker to elevate privileges on an affected system. The vulnerability by itself does not allow arbitrary code execution but could be used in combination with another vulnerability to run arbitrary code.

Recommendations For Internet Explorer 11, update to a version that includes the fix for this issue. For Microsoft Edge, update to a version that includes the fix for this issue. As a temporary workaround, consider restricting access to sensitive areas of the system to minimize the risk of exploitation.

Correção

Enumeração de Fraquezas

CWE-265

Identificadores relacionados

BDU:2018-01042

CVE-2018-8357

Produtos afetados

Edge

Internet Explorer

Internet Explorer 11

Referências · 8

• https://support.microsoft.com/help/4343887 · Nota
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8357 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-8357 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-8357 · Nota de Segurança
• https://bdu.fstec.ru/vul/2018-01042 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-8357 · Aviso do Fabricante
• http://securityfocus.com/bid/105022 · Nota
• http://securitytracker.com/id/1041457 · Nota