CVE-2018-0780

CVSS 3.0: 5.3 medium
EPSS: 59%p99
Published: Jan 4, 2018 · Jan 4, 2018
Modified: Jun 17, 2026

Analyze CVE-2018-0780 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to obtain information to further compromise the user's system, due to how the scripting engine handles objects in memory, aka "Scripting Engine Information Disclosure Vulnerability". This CVE ID is unique from CVE-2018-0767 and CVE-2018-0800.

Vendors: microsoft

Products: edge, chakracore

Weakness: CWE-125

Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (58.6%)

In the news

1 story

Microsoft Patch Tuesday

Cisco TalosJan 9, 21:36 UTC · Jan 9, 2018VulnerabilityCVE-2018-0758 CVE-2018-0762 CVE-2018-0767+513 · 1 read