CVE-2018-8567

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

An elevation of privilege vulnerability exists when Microsoft Edge does not properly enforce cross-domain policies, which could allow an attacker to access information from one domain and inject it into another domain, aka "Microsoft Edge Elevation of Privilege Vulnerability." This affects Microsoft Edge.

Metrics

CVSS 3.0 5.4/10CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

Affected software

No affected versions have been published.

Timeline

Published: Nov 14, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-85685.4An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request t CVE-2018-85697.8A remote code execution vulnerability exists in the Yammer desktop application due to the loading of arbitrary content, aka "Yammer Desktop CVE-2018-85707.5A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Cor CVE-2018-85725.4An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request t CVE-2018-85737.8A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka "Microsoft W CVE-2018-85747.8A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "CVE-2018-85757.8A remote code execution vulnerability exists in Microsoft Project software when it fails to properly handle objects in memory, aka "Microsof CVE-2018-85767.8A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory, aka "Microsof CVE-2018-85777.8A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "CVE-2018-85784.3An information disclosure vulnerability exists when Microsoft SharePoint Server improperly discloses its folder structure when rendering spe CVE-2018-85796.5An information disclosure vulnerability exists when attaching files to Outlook messages, aka "Microsoft Outlook Information Disclosure Vulne CVE-2018-85804.3An information disclosure vulnerability exists where certain modes of the search function in Microsoft SharePoint Server are vulnerable to c