PT-2018-1491 · Microsoft · Edge+2

James Lee + 2 · Published 2018-08-14 · Updated 2019-10-03 · CVE-2018-8357

Positive Technologies (AI Summary)

CVSS v3.1

8.3

High

Base vector

AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Internet Explorer 11 Microsoft Edge

Description An elevation of privilege issue exists in Microsoft browsers, allowing sandbox escape. This could enable an attacker to elevate privileges on an affected system. The vulnerability by itself does not allow arbitrary code execution but could be used in combination with another vulnerability to run arbitrary code.

Recommendations For Internet Explorer 11, update to a version that includes the fix for this issue. For Microsoft Edge, update to a version that includes the fix for this issue. As a temporary workaround, consider restricting access to sensitive areas of the system to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-265

Related Identifiers

BDU:2018-01042

CVE-2018-8357

Affected Products

Edge

Internet Explorer

Internet Explorer 11

References · 8

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8357 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-8357 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-8357 · Security Note
• https://bdu.fstec.ru/vul/2018-01042 · Security Note
• https://osv.dev/vulnerability/CVE-2018-8357 · Vendor Advisory
• https://support.microsoft.com/help/4343887 · Note
• http://securityfocus.com/bid/105022 · Note
• http://securitytracker.com/id/1041457 · Note