CVE-2018-8545

—

CVSS 3.0

4.3 medium

EPSS

6%p93

Published

Nov 14, 2018 (Nov 14, 2018)

Modified

Jun 17, 2026

Description

An information disclosure vulnerability exists in the way that Microsoft Edge handles cross-origin requests, aka "Microsoft Edge Information Disclosure Vulnerability." This affects Microsoft Edge.

Vendors: microsoft
Products: edge
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (5.9%)

In the news2 stories

Unpatched Zero-Days in Microsoft Edge and IE Browsers Disclosed Publicly

The Hacker NewsApr 2, 12:45 UTC · Apr 2, 2019Vulnerability CVE-2018-8351 CVE-2018-8545

63 New Flaws (Including 0

The Hacker NewsNov 15, 00:00 UTC · Nov 15, 2018Exploit / PoC in the wildCVE-2018-8589 CVE-2018-8584 CVE-2018-8566+47 CVEs