What’s Vulnerable › Vulnerabilities

CVE-2018-8319

• Severity: critical (CVSS 9.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 7.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-07-11 · updated 2026-06-17
• Weakness: CWE-682

Description

A Security Feature Bypass vulnerability exists in MSR JavaScript Cryptography Library that is caused by incorrect arithmetic computations, aka "MSR JavaScript Cryptography Library Security Feature Bypass Vulnerability." This affects Microsoft Research JavaScript Cryptography Library.

Affected products

• Microsoft Research JavaScript Cryptography Library V1.4: 1.4
• Microsoft Research JavaScript Cryptography Library V1.4: Microsoft Research JavaScript Cryptography Library

References

• http://www.securityfocus.com/bid/104655
• http://www.securitytracker.com/id/1041268
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8319
• http://www.securityfocus.com/bid/104655
• http://www.securitytracker.com/id/1041268
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8319

Get alerted when CVE-2018-8319 or the next vulnerability affects your stack