CVE-2018-8278

—

CVSS 3.0

6.1 medium

EPSS

6%p93

Published

Jul 11, 2018 (Jul 11, 2018)

Modified

Jun 17, 2026

Description

A spoofing vulnerability exists when Microsoft Edge improperly handles specific HTML content, aka "Microsoft Edge Spoofing Vulnerability." This affects Microsoft Edge.

Vendors: microsoft
Products: edge
Weakness: CWE-290
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (6.4%)

In the news2 stories

Patch Tuesday, July 2018 Edition

Krebs on SecurityJul 11, 02:45 UTC · Jul 11, 2018Vulnerability CVE-2018-8278 CVE-2018-8313 CVE-2018-8314

Microsoft Patch Tuesday

Cisco TalosJul 10, 17:36 UTC · Jul 10, 2018Vulnerability CVE-2018-8242 CVE-2018-8262 CVE-2018-8274+48 CVEs1