Skip to content
CVE Tracker
Back

CVE-2018-8564

A spoofing vulnerability exists when Microsoft Edge improperly handles specific HTML content, aka "Microsoft Edge Spoofing Vulnerability."…

Medium4.3EPSS 2.7%
Published
Updated
Reserved
Assigned by
microsoft

Description

A spoofing vulnerability exists when Microsoft Edge improperly handles specific HTML content, aka "Microsoft Edge Spoofing Vulnerability." This affects Microsoft Edge.

Scores

CVSS scores of CVE-2018-8564, by who scored it
Scored byCVSSScoreVector
NVDNVD · Modified3.0Medium4.3CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
EPSS (exploitation in 30 days)
2.7% · top 14% of all CVEs (2 Nov 2026)

Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 4.3.

Weakness

  • Spoofing

Affected products

  • Microsoft · Microsoft Edge

    • affected Windows 10 for 32-bit Systems
    • affected Windows 10 for x64-based Systems
    • affected Windows 10 Version 1607 for 32-bit Systems
    • affected Windows 10 Version 1607 for x64-based Systems
    • affected Windows 10 Version 1703 for 32-bit Systems
    • affected Windows 10 Version 1703 for x64-based Systems
    • affected Windows 10 Version 1709 for 32-bit Systems
    • affected Windows 10 Version 1709 for ARM64-based Systems
    • affected Windows 10 Version 1709 for x64-based Systems
    • affected Windows 10 Version 1803 for 32-bit Systems
    • affected Windows 10 Version 1803 for ARM64-based Systems
    • affected Windows 10 Version 1803 for x64-based Systems
    • affected Windows 10 Version 1809 for 32-bit Systems
    • affected Windows 10 Version 1809 for ARM64-based Systems
    • affected Windows 10 Version 1809 for x64-based Systems
    • affected Windows Server 2016
    • affected Windows Server 2019

References (2)

Sources

The same CVE in the primary databases and aggregators, to check against.

Record last updated .