PT-2018-18450 · Microsoft · Internet Explorer 11+1

Enigma0X3 · Published 2018-05-08 · Updated 2019-10-03 · CVE-2018-8126

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Internet Explorer 11

Description A security feature bypass issue exists due to Internet Explorer's failure to validate User Mode Code Integrity (UMCI) policies. This could allow an attacker to bypass Device Guard UMCI policies.

Recommendations For Internet Explorer 11, update to a version that includes the fix for this security feature bypass issue.

Fix

Related Identifiers

CVE-2018-8126

Affected Products

Internet Explorer

Internet Explorer 11

References · 6

• https://osv.dev/vulnerability/CVE-2018-8126 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-8126 · Security Note
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8126 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-8126 · Security Note
• http://securityfocus.com/bid/103997 · Note
• http://securitytracker.com/id/1040846 · Note