CVE-2018-8552

An information disclosure vulnerability exists when VBScript improperly discloses the contents of its memory, which could provide an attacker with information…

published November 14, 2018

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 98.9th percentile for exploit probability.

CVSS
—
EPSS
51%
Percentile
98.9
In the wild
Unconfirmed
What it is

An information disclosure vulnerability exists when VBScript improperly discloses the contents of its memory, which could provide an attacker with information to further compromise the user's computer or data, aka "Windows Scripting Engine Memory Corruption Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.50964 · 98.9th percentile
Published
2018-11-14T01:00Z
EPSS history
Timeline
  • 22 SEP 03:16Z
    EPSS moved 51% → 37%
    epss
  • 06 SEP 03:12Z
    EPSS moved 51% → 37%
    epss
  • 30 AUG 16:01Z
    EPSS moved 37% → 51%
    epss
  • 29 AUG 04:43Z
    EPSS moved 51% → 37%
    epss
  • 14 NOV 01:00Z
    An information disclosure vulnerability exists when VBScript improperly discloses the contents of its memory, which could provide an attacker with information…
    cvelistv5