CVE-2018-8389

HIGH EXPLOITED IN THE WILD RANSOMWARE

Internet Explorer <11 - Memory Corruption

Title source: llm

Description

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripting Engine Memory Corruption Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10. This CVE ID is unique from CVE-2018-8353, CVE-2018-8355, CVE-2018-8359, CVE-2018-8371, CVE-2018-8372, CVE-2018-8373, CVE-2018-8385, CVE-2018-8390.

Exploits (1)

nomisec WRITEUP
by sandi-go · poc
https://github.com/sandi-go/cve-2018-8389

Scores

CVSS v3 7.5
EPSS 0.5296
EPSS Percentile 98.0%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

VulnCheck KEV 2020-10-15
InTheWild.io 2022-05-25
Ransomware Use Confirmed
CWE
CWE-787
Status published
Products (3)
microsoft/internet_explorer 11
microsoft/internet_explorer 10
microsoft/internet_explorer 9
Published Aug 15, 2018
Tracked Since Feb 18, 2026