CVE-2018-8370 - A information disclosure vulnerability exists when WebAudio Library improperly handles audio requests, aka "Microsoft Edge Information Disclosure Vulnerability." This affects Microsoft Edge

Back Back to CVE browser

LOW

A information disclosure vulnerability exists when WebAudio Library improperly handles audio requests, aka "Microsoft Edge Information Disclosure Vulnerability." This affects Microsoft Edge

Published Aug 15, 2018

3.1

LOW

CVSS 3.0

EPSS 4.57%

Description

A information disclosure vulnerability exists when WebAudio Library improperly handles audio requests, aka "Microsoft Edge Information Disclosure Vulnerability." This affects Microsoft Edge.

Affected products

Vendor Microsoft Product Microsoft Edge Default
n/a
- Version
  Windows 10 Version 1607 for 32-bit Systems
  Status
  affected
  Constraints
  -
- Version
  Windows 10 Version 1607 for x64-based Systems
  Status
  affected
  Constraints
  -
- Version
  Windows 10 Version 1703 for 32-bit Systems
  Status
  affected
  Constraints
  -
- Version
  Windows 10 Version 1703 for x64-based Systems
  Status
  affected
  Constraints
  -
- Version
  Windows 10 Version 1709 for 32-bit Systems
  Status
  affected
  Constraints
  -
- Version
  Windows 10 Version 1709 for x64-based Systems
  Status
  affected
  Constraints
  -
- Version
  Windows 10 Version 1803 for 32-bit Systems
  Status
  affected
  Constraints
  -
- Version
  Windows 10 Version 1803 for x64-based Systems
  Status
  affected
  Constraints
  -
- Version
  Windows 10 for 32-bit Systems
  Status
  affected
  Constraints
  -
- Version
  Windows 10 for x64-based Systems
  Status
  affected
  Constraints
  -
- Version
  Windows Server 2016
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Microsoft

Microsoft Edge

n/a

Version	Status	Constraints
Windows 10 Version 1607 for 32-bit Systems	affected	-
Windows 10 Version 1607 for x64-based Systems	affected	-
Windows 10 Version 1703 for 32-bit Systems	affected	-
Windows 10 Version 1703 for x64-based Systems	affected	-
Windows 10 Version 1709 for 32-bit Systems	affected	-
Windows 10 Version 1709 for x64-based Systems	affected	-
Windows 10 Version 1803 for 32-bit Systems	affected	-
Windows 10 Version 1803 for x64-based Systems	affected	-
Windows 10 for 32-bit Systems	affected	-
Windows 10 for x64-based Systems	affected	-
Windows Server 2016	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-200

Exposure of Sensitive Information

References (3)

http://www.securityfocus.com/bid/105019
vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1041457
vdb-entryx_refsource_SECTRACKThird Party AdvisoryVDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8370
x_refsource_CONFIRMPatchVendor Advisory

Link	Providers	Tags
http://www.securityfocus.com/bid/105019		vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1041457		vdb-entryx_refsource_SECTRACKThird Party AdvisoryVDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8370		x_refsource_CONFIRMPatchVendor Advisory