Microsoft · Internet Explorer
CVE-2018-8653
Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability
무엇인가
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripting Engine Memory Corruption Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10. This CVE ID is unique from CVE-2018-8643.
CISA: Microsoft Internet Explorer contains a memory corruption vulnerability due to how the Scripting Engine handles objects in memory, leading to remote code execution.
할 일
Apply updates per vendor instructions.
미국 연방 기관 조치 기한: 2022년 5월 3일
Microsoft의 다른 악용된 결함
| 추가됨 | 취약점 | 제품 | 심각도 | 공격 가능성 |
|---|---|---|---|---|
| 2026. 5. 20. | Use-After-Free | Internet Explorer | 높음 8.8 | 92% |
| 2026. 5. 20. | Use-After-Free | Internet Explorer | 높음 8.8 | 82% |
| 2025. 10. 6. | Uninitialized Memory Corruption | Internet Explorer | 높음 8.1 | 97% |
| 2025. 8. 12. | Resource Management Errors | Internet Explorer | 높음 8.8 | 88% |
| 2024. 7. 23. | Use-After-Free | Internet Explorer | 높음 8.8 | 79% |
| 2023. 3. 30. | Memory Corruption | Internet Explorer | 높음 8.8 | 71% |
| 2022. 6. 8. | Use-After-Free | Internet Explorer | 높음 8.1 | 80% |
| 2022. 5. 25. | Information Disclosure | Internet Explorer | 보통 6.5 | 50% |
출처: Known Exploited Vulnerabilities(CISA, 퍼블릭 도메인), CVE records(cve.org), EPSS(FIRST). 공격 가능성은 누군가 향후 30일 안에 이 결함을 악용하려 할 확률에 대한 EPSS 추정치입니다.