CVE-2018-0780
MEDIUMMicrosoft Edge < 1.7.6 - Out-of-Bounds Read
Title source: ruleDescription
Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to obtain information to further compromise the user's system, due to how the scripting engine handles objects in memory, aka "Scripting Engine Information Disclosure Vulnerability". This CVE ID is unique from CVE-2018-0767 and CVE-2018-0800.
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by Google Security Research · javascriptdoswindows
https://www.exploit-db.com/exploits/43720
References (4)
Scores
CVSS v3
5.3
EPSS
0.7564
EPSS Percentile
98.9%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N
Details
CWE
CWE-125
Status
published
Products (2)
microsoft/chakracore
< 1.7.6
microsoft/edge
Published
Jan 04, 2018
Tracked Since
Feb 18, 2026