CVE-2018-8319
9.8
CRITICAL · CVSS 3.0 · EPSS 7.5% (pctl 94)
In your normal cycle
Critical by CVSS (9.8), but no sign of active exploitation.
Description
A Security Feature Bypass vulnerability exists in MSR JavaScript Cryptography Library that is caused by incorrect arithmetic computations, aka "MSR JavaScript Cryptography Library Security Feature Bypass Vulnerability." This affects Microsoft Research JavaScript Cryptography Library.
Scoring
| CVSS | 9.8 (CRITICAL, v3.0) |
|---|---|
| Vector | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| EPSS | 7.5% — more likely to be exploited than 94% of all CVEs |
| Weakness | CWE-682 |
| On CISA KEV | no |
| Public exploit | none known |
| Published | 2018-07-11 |
| Last modified | 2026-06-17 |
Affected (1)
| Vendor | Product |
|---|---|
| microsoft | research javascript cryptography library |
References
- http://www.securityfocus.com/bid/104655
- http://www.securitytracker.com/id/1041268
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8319
- http://www.securityfocus.com/bid/104655
- http://www.securitytracker.com/id/1041268
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8319
→ the Explorer · watch your stack · NVD