CVE-2018-8278

CVE-2018-8278 is a medium-severity spoofing vulnerability in Microsoft Edge, affecting Microsoft Windows 10, where the browser improperly handles specific HTML content. An attacker could exploit this by tricking a user into interacting with specially crafted content, potentially leading to information disclosure or integrity compromise. While the CVSS score is 6.1, indicating a moderate risk, there is no evidence of active exploitation, public exploit code, or inclusion in CISA's KEV catalog. Despite this, the vulnerability received notable community discussion and media coverage during its disclosure.