VULNERABILITY INTELLIGENCE

CVE-2018-8625

CVSS score7.5 HIGH

EPSS probability43.76%

CISA KEVNot currently listed

Published2018-12-12

Last modified2026-06-17

CVSS vectorCVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Remote Code Execution Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10.

Weakness classification

CWE-416: Use After Free

Primary references

secure@microsoft.com — Third Party Advisory, VDB Entry
secure@microsoft.com — Patch, Vendor Advisory
secure@microsoft.com — Exploit, Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory, VDB Entry