CVE-2018-8470

Summary

A security feature bypass vulnerability exists in Internet Explorer due to how scripts are handled that allows a universal cross-site scripting (UXSS) condition, aka "Internet Explorer Security Feature Bypass Vulnerability." This affects Internet Explorer 11.

Affected Software

VendorProductVersion RangeStatus
MicrosoftInternet Explorer 11Windows 10 for 32-bit Systemsaffected
MicrosoftInternet Explorer 11Windows 10 for x64-based Systemsaffected
MicrosoftInternet Explorer 11Windows 10 Version 1607 for 32-bit Systemsaffected
MicrosoftInternet Explorer 11Windows 10 Version 1607 for x64-based Systemsaffected
MicrosoftInternet Explorer 11Windows 10 Version 1703 for 32-bit Systemsaffected
MicrosoftInternet Explorer 11Windows 10 Version 1703 for x64-based Systemsaffected
MicrosoftInternet Explorer 11Windows 10 Version 1709 for 32-bit Systemsaffected
MicrosoftInternet Explorer 11Windows 10 Version 1709 for x64-based Systemsaffected
MicrosoftInternet Explorer 11Windows 10 Version 1803 for 32-bit Systemsaffected
MicrosoftInternet Explorer 11Windows 10 Version 1803 for x64-based Systemsaffected
MicrosoftInternet Explorer 11Windows 7 for 32-bit Systems Service Pack 1affected
MicrosoftInternet Explorer 11Windows 7 for x64-based Systems Service Pack 1affected
MicrosoftInternet Explorer 11Windows 8.1 for 32-bit systemsaffected
MicrosoftInternet Explorer 11Windows 8.1 for x64-based systemsaffected
MicrosoftInternet Explorer 11Windows RT 8.1affected
MicrosoftInternet Explorer 11Windows Server 2008 R2 for x64-based Systems Service Pack 1affected
MicrosoftInternet Explorer 11Windows Server 2012 R2affected
MicrosoftInternet Explorer 11Windows Server 2016affected

Weaknesses

  • Security Feature Bypass

ADP Enrichment

CVE Program Container

Additional References

References