A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripting Engine Memory Corruption Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10. This CVE ID is unique from CVE-2018-8643.

The Internet Explorer installation on the remote host is missing security updates. It is, therefore, affected by a remote code execution vulnerability:

  - A remote code execution vulnerability exists in the way that the     scripting engine handles objects in memory in Internet Explorer.
    The vulnerability could corrupt memory in such a way that an     attacker could execute arbitrary code in the context of the     current user. An attacker who successfully exploited the     vulnerability could gain the same user rights as the current     user. If the current user is logged on with administrative user     rights, an attacker who successfully exploited the vulnerability     could take control of an affected system. An attacker could then     install programs; view, change, or delete data; or create new     accounts with full user rights. (CVE-2018-8653)

The remote Windows host is missing security update 4483235.
It is, therefore, affected by a remote code execution vulnerability:

  - A remote code execution vulnerability exists in the way that the     scripting engine handles objects in memory in Internet Explorer.
    The vulnerability could corrupt memory in such a way that an     attacker could execute arbitrary code in the context of the     current user. An attacker who successfully exploited the     vulnerability could gain the same user rights as the current     user. If the current user is logged on with administrative user     rights, an attacker who successfully exploited the vulnerability     could take control of an affected system. An attacker could then     install programs; view, change, or delete data; or create new     accounts with full user rights. (CVE-2018-8653)

The remote Windows host is missing security update 4483234.
It is, therefore, affected by a remote code execution vulnerability:

  - A remote code execution vulnerability exists in the way that the     scripting engine handles objects in memory in Internet Explorer.
    The vulnerability could corrupt memory in such a way that an     attacker could execute arbitrary code in the context of the     current user. An attacker who successfully exploited the     vulnerability could gain the same user rights as the current     user. If the current user is logged on with administrative user     rights, an attacker who successfully exploited the vulnerability     could take control of an affected system. An attacker could then     install programs; view, change, or delete data; or create new     accounts with full user rights. (CVE-2018-8653)

The remote Windows host is missing security update 4483232.
It is, therefore, affected by a remote code execution vulnerability:

  - A remote code execution vulnerability exists in the way that the     scripting engine handles objects in memory in Internet Explorer.
    The vulnerability could corrupt memory in such a way that an     attacker could execute arbitrary code in the context of the     current user. An attacker who successfully exploited the     vulnerability could gain the same user rights as the current     user. If the current user is logged on with administrative user     rights, an attacker who successfully exploited the vulnerability     could take control of an affected system. An attacker could then     install programs; view, change, or delete data; or create new     accounts with full user rights. (CVE-2018-8653)

The remote Windows host is missing security update 4483230.
It is, therefore, affected by a remote code execution vulnerability:

  - A remote code execution vulnerability exists in the way that the     scripting engine handles objects in memory in Internet Explorer.
    The vulnerability could corrupt memory in such a way that an     attacker could execute arbitrary code in the context of the     current user. An attacker who successfully exploited the     vulnerability could gain the same user rights as the current     user. If the current user is logged on with administrative user     rights, an attacker who successfully exploited the vulnerability     could take control of an affected system. An attacker could then     install programs; view, change, or delete data; or create new     accounts with full user rights. (CVE-2018-8653)

The remote Windows host is missing security update 4483229.
It is, therefore, affected by a remote code execution vulnerability:

  - A remote code execution vulnerability exists in the way that the     scripting engine handles objects in memory in Internet Explorer.
    The vulnerability could corrupt memory in such a way that an     attacker could execute arbitrary code in the context of the     current user. An attacker who successfully exploited the     vulnerability could gain the same user rights as the current     user. If the current user is logged on with administrative user     rights, an attacker who successfully exploited the vulnerability     could take control of an affected system. An attacker could then     install programs; view, change, or delete data; or create new     accounts with full user rights. (CVE-2018-8653)

The remote Windows host is missing security update 4483228.
It is, therefore, affected by a remote code execution vulnerability:

  - A remote code execution vulnerability exists in the way that the     scripting engine handles objects in memory in Internet Explorer.
    The vulnerability could corrupt memory in such a way that an     attacker could execute arbitrary code in the context of the     current user. An attacker who successfully exploited the     vulnerability could gain the same user rights as the current     user. If the current user is logged on with administrative user     rights, an attacker who successfully exploited the vulnerability     could take control of an affected system. An attacker could then     install programs; view, change, or delete data; or create new     accounts with full user rights. (CVE-2018-8653)

ID	Name	Product	Family	Severity
119774	Security Updates for Internet Explorer (December 2018 OOB)	Nessus	Windows : Microsoft Bulletins	high
119773	KB4483235: Windows 10 Version 1809 and Windows Server 2019 December 2018 OOB Security Update	Nessus	Windows : Microsoft Bulletins	high
119772	KB4483234: Windows 10 Version 1803 and Windows Server Version 1803 December 2018 OOB Security Update	Nessus	Windows : Microsoft Bulletins	high
119771	KB4483232: Windows 10 Version 1709 and Windows Server Version 1709 December 2018 OOB Security Update	Nessus	Windows : Microsoft Bulletins	high
119770	KB4483230: Windows 10 Version 1703 December 2018 OOB Security Update	Nessus	Windows : Microsoft Bulletins	high
119769	KB4483229: Windows 10 Version 1607 and Windows Server 2016 December 2018 OOB Security Update	Nessus	Windows : Microsoft Bulletins	high
119768	KB4483228: Windows 10 December 2018 OOB Security Update	Nessus	Windows : Microsoft Bulletins	high

Detections

Analytics

CVE-2018-8653

high

Tenable Plugins

high

high

high

high

high

high

high