CVE-2018-8351

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

An information disclosure vulnerability exists when affected Microsoft browsers improperly allow cross-frame interaction, aka "Microsoft Browser Information Disclosure Vulnerability." This affects Internet Explorer 11, Microsoft Edge, Internet Explorer 10.

Metrics

CVSS 3.0 6.5/10CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-829

Affected software

No affected versions have been published.

Timeline

Published
Aug 15, 2018
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2018

CVE-2018-83537.5A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "ScripCVE-2018-83547.5A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "ScriptinCVE-2018-83557.5A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "ScriptingCVE-2018-83565.5A security feature bypass vulnerability exists when Microsoft .NET Framework components do not correctly validate certificates, aka ".NET FrCVE-2018-83578.3An elevation of privilege vulnerability exists in Microsoft browsers allowing sandbox escape, aka "Microsoft Browser Elevation of Privilege CVE-2018-83584.3A security feature bypass vulnerability exists when Microsoft Edge improperly handles redirect requests, aka "Microsoft Edge Security FeaturCVE-2018-83597.5A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting EnginCVE-2018-83607.5An information disclosure vulnerability exists in Microsoft .NET Framework that could allow an attacker to access information in multi-tenanCVE-2018-83663.1An information disclosure vulnerability exists when the Microsoft Edge Fetch API incorrectly handles a filtered response type, aka "MicrosofCVE-2018-83677.5A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "CCVE-2018-83703.1A information disclosure vulnerability exists when WebAudio Library improperly handles audio requests, aka "Microsoft Edge Information DisclCVE-2018-83717.5A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scrip
CVE-2018-8351: Medium severity, CVSS 6.5 | Vulnix