CVE-2018-8389observed exploitation

CVE-2018-8389: vulnerability in Microsoft Internet Explorer 9

Published · Updated

Follow this CVE+ Monitor Internet Explorer

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

37Vexday Risk Score

Prioritize patching. It exploitation observed by VulnCheck.

ssvc Attendepss 30%
from disclosure to weapon
Published on NVDAug 15
VulnCheck+792d
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripting Engine Memory Corruption Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10. This CVE ID is unique from CVE-2018-8353, CVE-2018-8355, CVE-2018-8359, CVE-2018-8371, CVE-2018-8372, CVE-2018-8373, CVE-2018-8385, CVE-2018-8390.
Affected products
Microsoft · Internet Explorer 10Microsoft · Internet Explorer 11Microsoft · Internet Explorer 9
Related CVEs — Microsoft Internet Explorer 9

In the same product, most dangerous first.

CVE-2020-0674HIGHCVE-2020-0674EPSS 86.9%KEVCVE-2019-0752HIGHCVE-2019-0752EPSS 81.7%KEVCVE-2021-26411HIGHInternet Explorer Memory Corruption VulnerabilityEPSS 81.7%KEVCVE-2019-1429HIGHCVE-2019-1429EPSS 77.3%KEVCVE-2018-8373HIGHCVE-2018-8373EPSS 61.8%KEVCVE-2019-0541HIGHCVE-2019-0541EPSS 53.2%KEV