Archive

12 December 2018

Vulnerabilities first published on this day (UTC), newest first.

← November 2018 2018 / December /12 January 2019 →

All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

Unscored —

CVE-2018-8625 Public exploit EPSS 44%

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Window…

Microsoft Internet Explorer 11 Internet Explorer 9 Internet Explorer 10

Dec 12, 2018
High 8.4

CVE-2018-8639 Exploited · Ransomware Public exploit EPSS 22%

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…

Microsoft Windows Server 2019 Windows Server 2016 Windows Server 2012 R2 Windows

Dec 12, 2018
KEV Mar 3, 2025
Unscored —

CVE-2018-8587 Public exploit EPSS 29%

A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in …

Microsoft Microsoft Office Office Microsoft Outlook

Dec 12, 2018
Unscored —

CVE-2018-8619 Public exploit EPSS 45%

A remote code execution vulnerability exists when the Internet Explorer VBScript execution policy does not properly res…

Microsoft Internet Explorer 11 Internet Explorer 9 Internet Explorer 10

Dec 12, 2018
High 7.8

CVE-2018-8611 Exploited Public exploit

An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka …

Microsoft Windows Server 2019 Windows Server 2016 Windows Server 2012 R2 Windows

Dec 12, 2018
KEV May 24, 2022
Unscored —

CVE-2018-8631 Public exploit EPSS 68%

A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Interne…

Microsoft Internet Explorer 11 Internet Explorer 10 Internet Explorer 9

Dec 12, 2018
High 7.5

CVE-2018-8617 Public exploit EPSS 62%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Dec 12, 2018