CVE-2018-8351

CVE-2018-8351 is an information disclosure vulnerability affecting Microsoft Edge and Internet Explorer 10 and 11, where improper cross-frame interaction can lead to sensitive data exposure. With a CVSS score of 6.5 (Medium), this vulnerability can be exploited remotely with low attack complexity, requiring user interaction to achieve high confidentiality impact. While it has a relatively high EPSS score, indicating potential for exploitation, there is currently no public exploit code available in Metasploit or ExploitDB, and it is not listed on CISA's KEV catalog. Community discussion and media coverage are minimal, suggesting limited active exploitation or widespread attention.