CVE-2018-0775 is a scripting engine memory corruption vulnerability in Microsoft Edge on Windows 10 version 1709, allowing arbitrary code execution in the context of the current user. This high-severity vulnerability (CVSS 7.5) has a network attack vector, high attack complexity, and can lead to high impacts on confidentiality, integrity, and availability. While not listed in CISA KEV, an ExploitDB entry (EDB-43717) exists, and it garnered some community discussion and media coverage, including a mention in a BleepingComputer article about Microsoft's January Patch Tuesday.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:* | ||
< 1.7.6CPE matchmatch criteria | cpe:2.3:a:microsoft:chakracore:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.4 Bluesky, 0.2 Mastodon, and 0.1 GitHub mentions.
The average CVE in this peer group has 0.6 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.