CVE-2018-8316

high

Description

A remote code execution vulnerability exists when Internet Explorer improperly validates hyperlinks before loading executable libraries, aka "Internet Explorer Remote Code Execution Vulnerability." This affects Internet Explorer 11, Internet Explorer 10.

References

http://www.securityfocus.com/bid/105013

http://www.securitytracker.com/id/1041483

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8316

Details

Source: MITRE

Published: 2018-08-15

Updated: 2018-10-12

Type: CWE-20

Risk Information

CVSS v2

Base Score: 7.6

Vector: AV:N/AC:H/Au:N/C:C/I:C/A:C

Impact Score: 10

Exploitability Score: 4.9

Severity: HIGH

CVSS v3

Base Score: 7.5

Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Impact Score: 5.9

Exploitability Score: 1.6

Severity: HIGH