CVE-2018-8373: high-severity vulnerability in Microsoft Internet Explorer 9
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
Prioritize patching. It under exploitation confirmed by CISA.
Apply updates per vendor instructions.
A flaw in Internet Explorer's scripting engine allows attackers to run malicious code on your computer when you visit a compromised website. This happens because the browser doesn't properly manage memory when handling scripts.
Memory corruption vulnerability in Internet Explorer's scripting engine (versions 9, 10, 11) allows remote code execution via crafted script content. Exploitation requires user interaction (visiting malicious webpage); successful exploitation grants attacker code execution in the context of the current user.
The full analysis of this CVE is available in Portuguese →
In the same product, most dangerous first.