CVE-2018-0766

Severity: medium (CVSS 4.3 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 8.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-01-04 · updated 2026-06-17
Weakness: CWE-200

Description

Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to obtain information to further compromise the user's system, due to how the Microsoft Edge PDF Reader handles objects in memory, aka "Microsoft Edge Information Disclosure Vulnerability".

Affected products

Microsoft Edge: all versions
Microsoft Edge: Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016.

References

http://www.securityfocus.com/bid/102388
http://www.securitytracker.com/id/1040100
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0766
http://www.securityfocus.com/bid/102388
http://www.securitytracker.com/id/1040100
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0766

Get alerted when CVE-2018-0766 or the next vulnerability affects your stack