CVE-2018-8653: Microsoft Internet Explorer 9 vulnerability

1. In CISA KEVCISA KEV catalogue3 Nov 2021
2. Exploited (reported): not seen
3. Scanning observed: not seen
4. Proof of concept public: not seen
5. Not established: not seen

DescriptionCVE.org

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripting Engine Memory Corruption Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10. This CVE ID is unique from CVE-2018-8643.

• Microsoft · Internet Explorer 9Windows Server 2008 for 32-bit Systems Service Pack 2; Windows Server 2008 for x64-based Systems Service Pack 2
• Microsoft · Internet Explorer 11Windows 10 for 32-bit Systems; Windows 10 for x64-based Systems; Windows 10 Version 1607 for 32-bit Systems; Windows 10 Version 1607 for x64-based Systems; Windows 10 Version 1703 for 32-bit Systems; Windows 10 Version 1703 for x64-based Systems and 18 more
• Microsoft · Internet Explorer 10Windows Server 2012

Exploitation

Exploited in the wild. Listed in the CISA Known Exploited Vulnerabilities catalogue.

CISA KEV

Listed since 3 Nov 2021 · catalogue entry

Public check

No public nuclei template

Weakness

Out-of-bounds Write · Memory Corruption

Vendor

Microsoft

Published

December 2018

Band

Exploited in the wild, December 2018

1. 3 Nov 2021
   CISA added it to the KEV catalogue CISA

• NVD entrynvd.nist.gov
• CISA KEV cataloguecisa.gov
• CVE recordcve.org
• Weakness CWE-787cwe.mitre.org
• portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2portal.msrc.microsoft.com
• securityfocus.com/bid/106255securityfocus.com