CVE Vulnerabilities

CVE-2018-8619

Improper Privilege Management

Published: Dec 12, 2018 | Modified: Sep 28, 2020
CVSS 3.x
7.5
HIGH
Source:
NVD
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 2.x
7.6 HIGH
AV:N/AC:H/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu

A remote code execution vulnerability exists when the Internet Explorer VBScript execution policy does not properly restrict VBScript under specific conditions, aka Internet Explorer Remote Code Execution Vulnerability. This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10.

Weakness

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

Affected Software

Name Vendor Start Version End Version
Internet_explorer Microsoft 9 (including) 9 (including)

Potential Mitigations

References