CVE-2018-8653

HIGH KEV

Internet Explorer < - Memory Corruption

Title source: llm

Description

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripting Engine Memory Corruption Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10. This CVE ID is unique from CVE-2018-8643.

References (3)

[Broken Link, Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/106255

[Patch, Vendor Advisory] https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8653

[US Government Resource] https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-8653

Scores

CVSS v3 7.5

EPSS 0.2497

EPSS Percentile 96.2%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CISA KEV 2021-11-03

VulnCheck KEV 2018-12-19

InTheWild.io 2018-12-19

ENISA EUVD EUVD-2018-20264

CWE

CWE-787

Status published

Products (3)

microsoft/internet_explorer 9

microsoft/internet_explorer 10

microsoft/internet_explorer 11

Published Dec 20, 2018

KEV Added Nov 03, 2021

Tracked Since Feb 18, 2026