{"schemaVersion":3,"id":"CVE-2018-8512","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"A security feature bypass vulnerability exists in Microsoft Edge when the Edge Content Security Policy (CSP) fails to properly validate certain specially crafted documents, aka \"Microsoft Edge Security Feature Bypass Vulnerability.\" This affects Microsoft Edge. This CVE ID is unique from CVE-2018-8530.","dates":{"published":"2018-10-10T13:00:00.000Z","modified":"2024-08-05T07:02:24.462Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":5.8,"severity":"medium","version":"2.0","versionLabel":"v2.0","source":"NVD","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.0","versionLabel":"v3.0","source":"NVD","score":5.4,"severity":"medium","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":5.8,"severity":"medium","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.03451,"percentile":0.88878,"severity":"low","asOf":"2026-10-20T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-20T00:00:00.000Z","baselineScore":0.03451},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.03451,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.03451,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.03451,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.03451,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.03451,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.03451,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.03451,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.04825,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.03451,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.03451,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.03451,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.03451,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.03451,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.03451,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.03451,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.03451,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.03451,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.03451,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.03451,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.03451,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.03451,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.03451,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.03451,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.03451,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.03451,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.03451,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.03451,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.03451,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.03451,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.03451,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.03451,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.03451,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.03451,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.03451,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.03451,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.03451,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.03451,"percentile":0.88878}],"last30":[{"date":"2026-09-20T00:00:00.000Z","score":0.03451,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.04825,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.03451,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.03451,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.03451,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.03451,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.03451,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.03451,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.03451,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.03451,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.03451,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.03451,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.03451,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.03451,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.03451,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.03451,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.03451,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.03451,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.03451,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.03451,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.03451,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.03451,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.03451,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.03451,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.03451,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.03451,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.03451,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.03451,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.03451,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.03451,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.03451,"percentile":0.88878}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-20","name":"Improper Input Validation","description":"The product receives input or data, but it does\n        not validate or incorrectly validates that the input has the\n        properties that are required to process the data safely and\n        correctly.","type":"weakness","status":"Stable","abstraction":"Class","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/20.html"}],"affected":[{"vendor":"microsoft","product":"edge","name":"Edge","label":"edge","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/microsoft/edge"},{"vendor":"microsoft","product":"microsoft edge","name":"Microsoft Edge","label":"microsoft edge","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"Windows 10 Version 1703 for 32-bit Systems","noFixRecorded":false,"fixedIn":null},{"text":"Windows 10 Version 1703 for x64-based Systems","noFixRecorded":false,"fixedIn":null},{"text":"Windows 10 Version 1709 for 32-bit Systems","noFixRecorded":false,"fixedIn":null},{"text":"Windows 10 Version 1709 for x64-based Systems","noFixRecorded":false,"fixedIn":null}],"versionsText":"Windows 10 Version 1703 for 32-bit Systems | Windows 10 Version 1703 for x64-based Systems | Windows 10 Version 1709 for 32-bit Systems | Windows 10 Version 1709 for x64-based Systems","eol":null,"hubHref":"/vendor/microsoft/microsoft_edge"}],"affectedCount":2,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8512","label":"portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8512","hostname":"portal.msrc.microsoft.com","tags":["X Refsource CONFIRM","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/105486","label":"www.securityfocus.com/bid/105486","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID","Third Party Advisory"]},{"url":"http://www.securitytracker.com/id/1041825","label":"www.securitytracker.com/id/1041825","hostname":"www.securitytracker.com","tags":["VDB Entry","X Refsource SECTRACK","Third Party Advisory"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2018-10-10T13:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-05T07:02:24.462Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":24,"level":"low","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T13:06:56.042Z","stale":false,"partial":false}}