Skip to main content
cvebuzz

CVE mentions, exploit signals, and PoC evidence in one fast public view.

CVE detail

CVE-2018-8373

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripting Engine Memory Corruption Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10. This CVE ID is unique from CVE-2018-8353, CVE-2018-8355, CVE-2018-8359, CVE-2018-8371, CVE-2018-8372, CVE-2018-8385, CVE-2018-8389, CVE-2018-8390.

CVSS 7.5 · HighBuzz score 63.5KEV listed

Buzz score

Why this CVE is surfacing

Buzz score total 63.5

This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.

Buzz score components · mention 24.0 · diversity 14.5 · KEV 25.0 · OTX 0.0 · PoC 0.0
Mention score
24.0
10 evidence mentions in the snapshot
Diversity score
14.5
5 sources across 2 categories
KEV score
25.0
Known exploited vulnerability present
OTX score
0.0
0 OTX pulses
PoC score
0.0
0 repos · best confidence N/A
Best PoC traction
0
Maximum stars on a matched PoC repo

Why it matters now

Mention timeline

Total mentions
0
within the 30d window
Peak daily
0
highest bucket

Evidence

Source links by recency

Newest mentions first
10 source links · newest first
  • The importance of effective vulnerability remediation prioritizationHelp Net Security

    Too many organizations have yet to find a good formula for prioritizing which vulnerabilities should be remediated immediately and which can wait. According to the results of a recent Tenable research aimed at discovering why some flaws go unpatched for months and years, vulnerabilities with exploits show roughly the same persistence as those with no available exploit. “Defenders are still operating as though all vulnerabilities have the same likelihood of exploitation,” says Lamine Aouad, Staff … More →

    newswww.helpnetsecurity.comJun 9, 2020, 6:00 AM
  • A week in security (September 24 – 30)Malwarebytes Labs

    Last week on Labs was a busy one. We discussed how SMS phishing attacks target the job market, issued a warning for TV…

    newswww.malwarebytes.comSep 30, 2018, 5:00 PM
  • Buggy implementation of CVE-2018-8373 vulnerability used to deliver Quasar RATMalwarebytes Labs

    A variant of a remote code execution vulnerability with Internet Explorer’s scripting engine known as CVE-2018-8373 patched last August has been found in…

    newswww.malwarebytes.comSep 25, 2018, 5:00 PM
  • Traps Prevents In-The-Wild VBScript Zero-Day Exploit in Internet ExplorerUnit42

    Unit 42 details how advanced endpoint protection can prevent in-the-wild VBScript Zero-day exploit in Internet Explorer.

    vendorunit42.paloaltonetworks.comSep 7, 2018, 12:00 PM
  • Security Affairs newsletter Round 177 – News of the weekSecurity Affairs

    A new round of the weekly SecurityAffairs newsletter arrived! The best news of the week with Security Affairs. Let me inform you that my new book, “Digging in the Deep Web” is online with a special deal 20% discount Kindle Edition Paper Copy Once again thank you! · Chinas Belt and Road project (BRI) is […]

    newssecurityaffairs.comAug 26, 2018, 12:36 PM
  • North Korean Hackers Exploit Recently Patched Zero-DaySecurityWeek

    North Koren hackers are exploiting a recently patched vulnerability in Microsoft’s VBScript engine vulnerability

    newswww.securityweek.comAug 20, 2018, 6:47 PM
  • North Korea-linked Dark Hotel APT leverages CVE-2018-8373 exploitSecurity Affairs

    The North Korea-linked Dark Hotel APT group is leveraging the recently patched CVE-2018-8373 vulnerability in the VBScript engine in attacks in the wild. The vulnerability affects Internet Explorer 9, 10 and 11, it was first disclosed last month by Trend Micro and affected all supported versions of Windows. The flaw could be exploited by remote attackers […]

    newssecurityaffairs.comAug 19, 2018, 3:58 PM
  • August 2018 Patch Tuesday: Microsoft fixes two actively exploited zero-daysHelp Net Security

    In the August 2018 Patch Tuesday, Microsoft has plugged over 60 vulnerabilities, two of which are being actively exploited in the wild. In addition to those, the company has also released a critical update advisory that addresses vulnerabilities found and patched in Adobe Flash. Exploited zero-days The two patched zero-days are: CVE-2018-8414 – A vulnerability in Windows Shell that can be triggered by a user opening a specially crafted file and could allow the attacker … More →

    newswww.helpnetsecurity.comAug 15, 2018, 2:46 PM
  • August 2018 Microsoft Patch Tuesday fixes two flaws exploited in attacks in the wildSecurity Affairs

    Microsoft Patch Tuesday update for August 2018 addresses a total of 60 vulnerabilities, two of which are actively exploited in attacks in the wild. After Adobe, also Microsoft released the Patch Tuesday update for August 2018 that addresses a total of 60 vulnerabilities in Microsoft Windows, Edge Browser, Internet Explorer, Office, ChakraCore, .NET Framework, Exchange […]

    newssecurityaffairs.comAug 15, 2018, 8:40 AM
  • Microsoft Patches Zero-Day Flaws in Windows, Internet ExplorerSecurityWeek

    Microsoft’s Patch Tuesday updates for August 2018 address 60 vulnerabilities, including two zero-day flaws affecting Windows and Internet Explorer.

    newswww.securityweek.comAug 15, 2018, 5:34 AM

Exploit code

Public exploit repository references

Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.

0 repository references · best confidence N/A · max 0 stars
No public PoC repositories have been matched yet.

Related records

Similar CVEs

6 related CVEs with shared weakness or product evidence