CVE-2018-8113 is a security feature bypass vulnerability in Internet Explorer 11 that allows attackers to circumvent Mark of the Web (MOTW) tagging, impacting Microsoft Windows 10. With a CVSS score of 6.5 (Medium), it can be exploited remotely with low attack complexity, requiring user interaction, and potentially leading to high integrity impacts. While the vulnerability has a relatively high FAUCET Risk Score of 84/100 and an EPSS score indicating higher exploitability than most CVEs, there is no public exploit code available (Metasploit, Nuclei, ExploitDB), and it is not listed in the KEV catalog. Community discussion and media coverage are minimal, suggesting limited active exploitation or public awareness.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
11CPE matchmatch criteria | cpe:2.3:a:microsoft:internet_explorer:11:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.