{"id":"CVE-2018-8353","published":"2018-08-15T17:00:00Z","modified":"2024-08-05T06:54:35Z","title":"A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in…","vendor":null,"product":null,"tier":"core","eol":null,"description":{"text":"A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka \"Scripting Engine Memory Corruption Vulnerability.\" This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10. This CVE ID is unique from CVE-2018-8355, CVE-2018-8359, CVE-2018-8371, CVE-2018-8372, CVE-2018-8373, CVE-2018-8385, CVE-2018-8389, CVE-2018-8390.","provenance":"source","from":"CVE.org"},"summary":{"text":"A remote code execution vulnerability exists in how the scripting engine handles objects in memory in Internet Explorer, affecting Internet Explorer 9, 10, and 11.","provenance":"ai","model":"deepseek-v4-flash","generatedAt":"2026-10-23T03:20:18Z"},"cvss":null,"epss":{"score":0.67339,"percentile":0.99303,"date":"2026-10-28","provenance":"source"},"kev":null,"vulncheckKev":null,"exploited":false,"otx":{"pulseCount":0,"pulses":[],"provenance":"machine"},"cwes":[],"references":[{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8353","tags":["x_refsource_CONFIRM"]},{"url":"https://www.exploit-db.com/exploits/45279/","tags":["exploit","x_refsource_EXPLOIT-DB"]},{"url":"http://www.securitytracker.com/id/1041483","tags":["vdb-entry","x_refsource_SECTRACK"]},{"url":"http://www.securityfocus.com/bid/105034","tags":["vdb-entry","x_refsource_BID"]}],"techniques":[{"id":"T1204.002","name":"Malicious File","tactics":["execution"],"provenance":"source","basis":"ctid-cve","bases":["ctid-cve"],"basisDetail":"CTID attack_to_cve (Phase 2)","mappingType":"exploitation_technique","evidence":[],"confidence":"high"},{"id":"T1566","name":"Phishing","tactics":["initial-access"],"provenance":"source","basis":"ctid-cve","bases":["ctid-cve"],"basisDetail":"CTID attack_to_cve (Phase 2)","mappingType":"exploitation_technique","evidence":[],"confidence":"high"},{"id":"T1499.004","name":"Application or System Exploitation","tactics":["impact"],"provenance":"source","basis":"ctid-cve","bases":["ctid-cve"],"basisDetail":"CTID attack_to_cve (Phase 2)","mappingType":"primary_impact","evidence":[],"confidence":"high"},{"id":"T1574","name":"Hijack Execution Flow","tactics":["execution","stealth"],"provenance":"source","basis":"ctid-cve","bases":["ctid-cve"],"basisDetail":"CTID attack_to_cve (Phase 2)","mappingType":"primary_impact","evidence":[],"confidence":"high"},{"id":"T1005","name":"Data from Local System","tactics":["collection"],"provenance":"source","basis":"ctid-cve","bases":["ctid-cve"],"basisDetail":"CTID attack_to_cve (Phase 2)","mappingType":"secondary_impact","evidence":[],"confidence":"high"},{"id":"T1136","name":"Create Account","tactics":["persistence"],"provenance":"source","basis":"ctid-cve","bases":["ctid-cve"],"basisDetail":"CTID attack_to_cve (Phase 2)","mappingType":"secondary_impact","evidence":[],"confidence":"high"},{"id":"T1485","name":"Data Destruction","tactics":["impact"],"provenance":"source","basis":"ctid-cve","bases":["ctid-cve"],"basisDetail":"CTID attack_to_cve (Phase 2)","mappingType":"secondary_impact","evidence":[],"confidence":"high"},{"id":"T1565","name":"Data Manipulation","tactics":["impact"],"provenance":"source","basis":"ctid-cve","bases":["ctid-cve"],"basisDetail":"CTID attack_to_cve (Phase 2)","mappingType":"secondary_impact","evidence":[],"confidence":"high"}],"reports":[],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2018-20004","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-20004","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[{"id":45279,"url":"https://www.exploit-db.com/exploits/45279","title":"Microsoft Windows - JScript RegExp.lastIndex Use-After-Free","type":"dos","platform":"windows","date":"2018-08-28","verified":true,"provenance":"source"}],"exploitSources":{"exploitdb":{"count":1,"earliest":"2018-08-28"},"pocGithub":{"count":1,"skipped":0,"earliest":"2018-09-10","earliestUrl":"https://github.com/whereisr0da/CVE-2018-8353-POC","repos":[{"name":"whereisr0da/CVE-2018-8353-POC","url":"https://github.com/whereisr0da/CVE-2018-8353-POC","stars":2,"created":"2018-09-10"}]},"first":{"date":"2018-08-28","source":"Exploit-DB","url":"https://www.exploit-db.com/exploits/45279"},"provenance":"source"},"exploitRefs":["https://www.exploit-db.com/exploits/45279/"],"flow":[{"stage":"exploitation","techniques":["T1566","T1204.002"],"provenance":"source"},{"stage":"primary","techniques":["T1574","T1499.004"],"provenance":"source"},{"stage":"secondary","techniques":["T1136","T1005","T1485","T1565"],"provenance":"source"}],"timeline":[{"date":"2018-08-15","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2018-8353","provenance":"source"},{"date":"2018-08-28","kind":"exploit-public","label":"First public exploit: Exploit-DB (EDB-45279); later: PoC-in-GitHub 2018-09-10","url":"https://www.exploit-db.com/exploits/45279","provenance":"source"}],"speed":{"daysToPublicExploit":13,"firstExploitFrom":"Exploit-DB","daysToKev":null},"priority":{"score":24.9,"factors":[{"name":"In a KEV catalog","points":0.0,"detail":"not listed"},{"name":"Recent KEV listing","points":0.0,"detail":"not listed"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.86,"detail":"percentile 0.9930"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":5.0,"detail":"1 NVD reference tagged Exploit; 1 Exploit-DB entry; 1 PoC-in-GitHub repo"},{"name":"Mentioned in OTX pulses","points":0.0,"detail":"0 pulses"},{"name":"CVSS severity","points":0.0,"detail":"no CVSS"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}