CVE Watch—

CVE-2018-8653

Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability

CVSS

—

No CVSS

EPSS

29.6%

p98

KEV

YES

Nov 3, 2021

Exploit Today

0-100

Published: — · Last modified: —

EPSS · 30d

29.6%EPSS · 30 days29.6%

2026-09-172026-10-15

KEV catalog record

Product

Microsoft / Internet Explorer

Vulnerability

Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability

Added to KEV

Nov 3, 2021

Remediate by

May 3, 2022

Known ransomware use

Summary description

Microsoft Internet Explorer contains a memory corruption vulnerability due to how the Scripting Engine handles objects in memory, leading to remote code execution.

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2018-8653

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2021-270858.8 HIG

92.6%

KEV—78Microsoft Internet Explorer Remote Code Execution Vulnerability57d CVE-2021-264118.8 HIG

99.6%

KEV—80Microsoft Internet Explorer Memory Corruption Vulnerability14d CVE-2019-07527.5 HIG

99.6%

KEV—80Microsoft Internet Explorer Type Confusion Vulnerability65d CVE-2010-3962—

99.9%

KEV—80Microsoft Internet Explorer Uninitialized Memory Corruption Vulnerability—CVE-2010-0249—

99.8%

KEV—80Microsoft Internet Explorer Use-After-Free Vulnerability—CVE-2016-0189—

99.8%

KEV—80Microsoft Internet Explorer Memory Corruption Vulnerability—