긴급도 83/100 심각도 7.5 · 높음 악용확률 99.2% CISA KEV · 2022-03-25 CWE-787

CVE-2018-8373

CISA 기관 조치 기한: 2022-04-15

Microsoft Internet Explorer Scripting Engine

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripting Engine Memory Corruption Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10. This CVE ID is unique from CVE-2018-8353, CVE-2018-8355, CVE-2018-8359, CVE-2018-8371, CVE-2018-8372, CVE-2018-8385, CVE-2018-8389, CVE-2018-8390.

KEV 필수 조치: Apply updates per vendor instructions.

타임라인

2018-08-15 NVD 공개
2022-03-25 CISA KEV 등재(실제 악용 확인) 공개 후 1,318일
2022-04-15 CISA 기관 조치 기한 경과

벡터: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD 상세 ↗ 벤더 권고문 ↗ 참고 링크 ↗