CVE-2018-8351

—

CVSS 3.0

6.5 medium

EPSS

8%p94

Published

Aug 15, 2018 (Aug 15, 2018)

Modified

Jun 17, 2026

Description

An information disclosure vulnerability exists when affected Microsoft browsers improperly allow cross-frame interaction, aka "Microsoft Browser Information Disclosure Vulnerability." This affects Internet Explorer 11, Microsoft Edge, Internet Explorer 10.

Vendors: microsoft
Products: internet explorer, edge
Weakness: CWE-829
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (7.9%)

In the news2 stories

Unpatched Zero-Days in Microsoft Edge and IE Browsers Disclosed Publicly

The Hacker NewsApr 2, 12:45 UTC · Apr 2, 2019Vulnerability CVE-2018-8351 CVE-2018-8545

Microsoft Tuesday August 2018

Cisco TalosAug 14, 18:26 UTC · Aug 14, 2018Vulnerability CVE-2018-8273 CVE-2018-8302 CVE-2018-8344+49 CVEs