CVE-2018-8567 — An elevation of privilege vulnerability exists when Microsoft Edge does not properly enforce cross-domain policies, which could allow an attacker to access information from one domain and inject it into another domain, aka "Microsoft Edge Elevation of Privilege Vulnerability." This affects Microsoft Edge

Back Back to CVE browser

MEDIUM

An elevation of privilege vulnerability exists when Microsoft Edge does not properly enforce cross-domain policies, which could allow an attacker to access information from one domain and inject it into another domain, aka "Microsoft Edge Elevation of Privilege Vulnerability." This affects Microsoft Edge

Published Nov 14, 2018

5.4

MEDIUM

CVSS 3.0

EPSS 3.14%

Description

An elevation of privilege vulnerability exists when Microsoft Edge does not properly enforce cross-domain policies, which could allow an attacker to access information from one domain and inject it into another domain, aka "Microsoft Edge Elevation of Privilege Vulnerability." This affects Microsoft Edge.

Affected products

Vendor Microsoft Product Microsoft Edge Default
n/a
- Version
  Windows 10 Version 1709 for 32-bit Systems
  Status
  affected
  Constraints
  -
- Version
  Windows 10 Version 1709 for ARM64-based Systems
  Status
  affected
  Constraints
  -
- Version
  Windows 10 Version 1709 for x64-based Systems
  Status
  affected
  Constraints
  -
- Version
  Windows 10 Version 1803 for 32-bit Systems
  Status
  affected
  Constraints
  -
- Version
  Windows 10 Version 1803 for ARM64-based Systems
  Status
  affected
  Constraints
  -
- Version
  Windows 10 Version 1803 for x64-based Systems
  Status
  affected
  Constraints
  -
- Version
  Windows 10 Version 1809 for 32-bit Systems
  Status
  affected
  Constraints
  -
- Version
  Windows 10 Version 1809 for ARM64-based Systems
  Status
  affected
  Constraints
  -
- Version
  Windows 10 Version 1809 for x64-based Systems
  Status
  affected
  Constraints
  -
- Version
  Windows Server 2019
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Microsoft

Microsoft Edge

n/a

Version	Status	Constraints
Windows 10 Version 1709 for 32-bit Systems	affected	-
Windows 10 Version 1709 for ARM64-based Systems	affected	-
Windows 10 Version 1709 for x64-based Systems	affected	-
Windows 10 Version 1803 for 32-bit Systems	affected	-
Windows 10 Version 1803 for ARM64-based Systems	affected	-
Windows 10 Version 1803 for x64-based Systems	affected	-
Windows 10 Version 1809 for 32-bit Systems	affected	-
Windows 10 Version 1809 for ARM64-based Systems	affected	-
Windows 10 Version 1809 for x64-based Systems	affected	-
Windows Server 2019	affected	-

Remediation

No remediation recorded yet.

Metrics

3.14% 0.03141

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.03141

Score over time

2021–2026

EPSS v1
EPSS v2
EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v1
EPSS v2
EPSS v3
EPSS v4
EPSS v5

Table of values (35 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	3.14% (0.03141)	87.46th	v5 (v2026.06.15)
Sep 22, 2026	3.14% (0.03141)	87.34th	v5 (v2026.06.15)
Sep 21, 2026	4.34% (0.04344)	90.81th	v5 (v2026.06.15)
Sep 6, 2026	3.14% (0.03141)	87.06th	v5 (v2026.06.15)
Sep 5, 2026	4.34% (0.04344)	90.60th	v5 (v2026.06.15)
Aug 30, 2026	3.14% (0.03141)	86.99th	v5 (v2026.06.15)
Aug 28, 2026	4.34% (0.04344)	90.54th	v5 (v2026.06.15)
Aug 24, 2026	3.14% (0.03141)	86.91th	v5 (v2026.06.15)
Aug 23, 2026	4.34% (0.04344)	90.50th	v5 (v2026.06.15)
Jun 15, 2026	3.14% (0.03141)	86.19th	v5 (v2026.06.15)
May 31, 2026	5.25% (0.05255)	90.13th	v4 (v2025.03.14)
Apr 4, 2026	3.03% (0.03026)	86.61th	v4 (v2025.03.14)
Mar 30, 2025	0.71% (0.00715)	70.03th	v4 (v2025.03.14)
Mar 29, 2025	2.99% (0.02988)	77.53th	v4 (v2025.03.14)
Mar 17, 2025	0.83% (0.00834)	72.99th	v4 (v2025.03.14)
Dec 17, 2024	1.88% (0.01880)	88.14th	v3 (v2023.03.01)
Dec 12, 2024	0.51% (0.00508)	77.32th	v3 (v2023.03.01)
Jul 3, 2024	0.61% (0.00610)	78.76th	v3 (v2023.03.01)
Apr 6, 2024	0.71% (0.00706)	80.02th	v3 (v2023.03.01)
Nov 7, 2023	0.78% (0.00778)	79.43th	v3 (v2023.03.01)
Sep 19, 2023	0.80% (0.00799)	79.57th	v3 (v2023.03.01)
Jul 8, 2023	1.13% (0.01130)	82.70th	v3 (v2023.03.01)
Apr 11, 2023	0.65% (0.00650)	76.33th	v3 (v2023.03.01)
Mar 27, 2023	0.66% (0.00662)	76.55th	v3 (v2023.03.01)
Mar 7, 2023	0.65% (0.00650)	76.21th	v3 (v2023.03.01)
Mar 6, 2023	6.42% (0.06416)	91.03th	v2 (v2022.01.01)
Sep 26, 2022	5.85% (0.05853)	90.12th	v2 (v2022.01.01)
Aug 20, 2022	5.27% (0.05274)	89.25th	v2 (v2022.01.01)
May 10, 2022	4.79% (0.04794)	88.30th	v2 (v2022.01.01)
Apr 1, 2022	4.00% (0.04004)	84.54th	v2 (v2022.01.01)
Feb 4, 2022	4.00% (0.04004)	67.82th	v2 (v2022.01.01)
Feb 3, 2022	8.76% (0.08756)	86.41th	v1
Jan 6, 2022	8.76% (0.08756)	86.25th	v1
Sep 1, 2021	8.76% (0.08756)	93.70th	v1
Apr 14, 2021	8.76% (0.08756)	0.00th	v1

Weaknesses (0)

No CWE recorded.

References (3)

http://www.securityfocus.com/bid/105784
vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1042107
vdb-entryx_refsource_SECTRACKThird Party AdvisoryVDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8567
x_refsource_CONFIRMPatchVendor Advisory

Link	Providers	Tags
http://www.securityfocus.com/bid/105784		vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1042107		vdb-entryx_refsource_SECTRACKThird Party AdvisoryVDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8567		x_refsource_CONFIRMPatchVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner microsoft

Published Nov 14, 2018

Updated Aug 5, 2024

Reserved Mar 14, 2018

Link CVE-2018-8567

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2018-8567

Red Hat

Severity n/a

Public date n/a

Links CVE-2018-8567