Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cisa_kevCISACISA-KEV-CVE-2018-8653
HistoryNov 03, 2021 - 12:00 a.m.

Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability

2021-11-0300:00:00
CISA
www.cisa.gov
1

CVSS2

7.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.054

Percentile

93.2%

JSON

Microsoft Internet Explorer contains a memory corruption vulnerability due to how the Scripting Engine handles objects in memory, leading to remote code execution.

Related

thn 2
checkpoint_advisories 1
mskb 7
kaspersky 2
openvas 7
nessus 7
qualysblog 2
talosblog 1
cisa 1
symantec 1
cert 1
mscve 1
msrc 2
threatpost 3
krebs 2
cvelist 1
nvd 1
attackerkb 1
prion 1
cve 1
securelist 3
googleprojectzero 2
thn
thn
Microsoft Issues Emergency Patch For Under-Attack IE Zero Day
2018-12-20 07:35:00
Microsoft Patch Tuesday — January 2019 Security Updates Released
2019-01-09 07:33:00
checkpoint_advisories
checkpoint_advisories
Microsoft Internet Explorer Scripting Engine Memory Corruption (CVE-2018-8653)
2018-12-19 00:00:00
mskb
mskb
December 19, 2018—KB4483230 (OS Build 15063.1508)
2018-12-19 08:00:00
December 19, 2018—KB4483232 (OS Build 16299.847)
2018-12-19 08:00:00
December 19, 2018—KB4483235 (OS Build 17763.195)
2018-12-19 08:00:00
kaspersky
kaspersky
KLA11392 ACE vulnerability in Microsoft Internet Explorer
2018-12-19 00:00:00
KLA11882 ACE vulnerability in Microsoft Products (ESU)
2018-12-19 00:00:00
openvas
openvas
Scripting Engine Memory Corruption Vulnerability (KB4483234)
2018-12-20 00:00:00
Scripting Engine Memory Corruption Vulnerability (KB4483230)
2018-12-20 00:00:00
Scripting Engine Memory Corruption Vulnerability (KB4483232)
2018-12-20 00:00:00
nessus
nessus
KB4483232: Windows 10 Version 1709 and Windows Server Version 1709 December 2018 OOB Security Update
2018-12-19 00:00:00
KB4483234: Windows 10 Version 1803 and Windows Server Version 1803 December 2018 OOB Security Update
2018-12-19 00:00:00
KB4483235: Windows 10 Version 1809 and Windows Server 2019 December 2018 OOB Security Update
2018-12-19 00:00:00
qualysblog
qualysblog
January 2019 Patch Tuesday – 47 Vulns, 7 Critical, Adobe Vulns
2019-01-08 19:49:26
Managing CISA Known Exploited Vulnerabilities with Qualys VMDR
2022-02-23 05:39:00
talosblog
talosblog
Microsoft Patches Out-of-Band Internet Explorer Scripting Engine Vulnerability After Exploitation Detected in the Wild
2018-12-19 16:19:00
cisa
cisa
Microsoft Releases Out-of-Band Security Updates
2018-12-19 00:00:00
symantec
symantec
Microsoft Internet Explorer Scripting Engine CVE-2018-8653 Remote Memory Corruption Vulnerability
2018-12-19 00:00:00
cert
cert
Microsoft Internet Explorer scripting engine JScript memory corruption vulnerability
2018-12-19 00:00:00
mscve
mscve
Scripting Engine Memory Corruption Vulnerability
2018-12-19 08:00:00
msrc
msrc
2018 年 12 月のセキュリティ更新プログラム (月例)
2018-12-11 08:00:00
December 2018 Security Update Release
2018-12-19 18:04:47
threatpost
threatpost
Microsoft IE Zero Day Gets Emergency Patch
2018-12-20 14:30:18
Nation-State Attacks Drop in Latest Google Analysis
2020-03-30 20:53:22
Microsoft Issues Multiple Critical Patches for Edge Browser
2019-01-08 20:49:06
krebs
krebs
Microsoft Issues Emergency Fix for IE Zero Day
2018-12-19 21:01:27
Patch Tuesday, January 2019 Edition
2019-01-09 14:46:31
cvelist
cvelist
CVE-2018-8653
2018-12-20 13:00:00
nvd
nvd
CVE-2018-8653
2018-12-20 13:29:00
attackerkb
attackerkb
CVE-2018-8653
2018-12-20 00:00:00
prion
prion
Remote code execution
2018-12-20 13:29:00
cve
cve
CVE-2018-8653
2018-12-20 13:29:00
securelist
securelist
IT threat evolution Q2 2020
2020-09-03 10:00:20
Internet Explorer and Windows zero-day exploits used in Operation PowerFall
2020-08-12 07:00:28
Magnitude exploit kit – evolution
2020-06-24 10:00:16
googleprojectzero
googleprojectzero
Detection Deficit: A Year in Review of 0-days Used In-The-Wild in 2019
2020-07-29 00:00:00
Déjà vu-lnerability
2021-02-03 00:00:00

CVSS2

7.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.054

Percentile

93.2%

JSON
Related for CISA-KEV-CVE-2018-8653
thn2checkpoint_advisories1mskb7kaspersky2openvas7nessus7qualysblog2talosblog1cisa1symantec1cert1mscve1msrc2threatpost3krebs2cvelist1nvd1attackerkb1prion1cve1securelist3googleprojectzero2