CVE-2018-8387

CVE-2018-8387 is a remote code execution vulnerability in Microsoft Edge, stemming from improper memory access, and affects Microsoft Edge running on Microsoft Windows 10. It carries a high CVSS score of 7.5, indicating that an unauthenticated attacker could achieve high impact on confidentiality, integrity, and availability with high attack complexity, typically requiring user interaction. While the vulnerability has a high EPSS score and FAUCET Risk Score, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or inclusion in CISA's KEV catalog. Community discussion and media coverage are minimal, with only one article mentioning it as part of a larger patch Tuesday.