{"id":"CVE-2018-0998","aliases":["EUVD-2018-1771","GHSA-rpc6-p2hj-p63g"],"status":"published","title":"An information disclosure vulnerability exists when Microsoft Edge PDF Reader improperly handles...","description":"An information disclosure vulnerability exists when Microsoft Edge PDF Reader improperly handles objects in memory, aka \"Microsoft Edge Information Disclosure Vulnerability.\" This affects Microsoft Edge. This CVE ID is unique from CVE-2018-0892.","severity":{"version":"3.0","score":4.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.0556,"percentile":0.92909,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2018-04-12T01:00:00Z","modified":"2026-06-17T01:32:10Z","products":[{"vendor":"microsoft","product":"edge"},{"vendor":"microsoft","product":"microsoft edge"}],"references":[{"url":"http://www.securityfocus.com/bid/103598","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0998","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1040650","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-0998"},{"url":"https://github.com/advisories/GHSA-rpc6-p2hj-p63g"}],"sources":{"cve":[{"id":"CVE-2018-0998","description":"An information disclosure vulnerability exists when Microsoft Edge PDF Reader improperly handles objects in memory, aka \"Microsoft Edge Information Disclosure Vulnerability.\" This affects Microsoft Edge. This CVE ID is unique from CVE-2018-0892.","status":"published","published":"2018-04-12T01:00:00Z","modified":"2024-08-05T03:44:11.811Z","updated_at":"2026-11-02T14:35:12.160284Z"}],"euvd":[{"id":"EUVD-2018-1771","description":"An information disclosure vulnerability exists when Microsoft Edge PDF Reader improperly handles objects in memory, aka \"Microsoft Edge Information Disclosure Vulnerability.\" This affects Microsoft Edge. This CVE ID is unique from CVE-2018-0892.","status":"published","published":"2018-04-12T01:00:00Z","modified":"2024-08-05T03:44:11Z","updated_at":"2026-11-03T02:40:16.874515Z"}],"ghsa":[{"id":"GHSA-rpc6-p2hj-p63g","title":"An information disclosure vulnerability exists when Microsoft Edge PDF Reader improperly handles...","description":"An information disclosure vulnerability exists when Microsoft Edge PDF Reader improperly handles objects in memory, aka \"Microsoft Edge Information Disclosure Vulnerability.\" This affects Microsoft Edge. This CVE ID is unique from CVE-2018-0892.","status":"published","published":"2022-05-13T01:18:42Z","modified":"2023-02-01T05:05:24Z","cvss":[{"version":"3.0","score":4.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T14:50:14.84305Z"}],"nvd":[{"id":"CVE-2018-0998","description":"An information disclosure vulnerability exists when Microsoft Edge PDF Reader improperly handles objects in memory, aka \"Microsoft Edge Information Disclosure Vulnerability.\" This affects Microsoft Edge. This CVE ID is unique from CVE-2018-0892.","status":"published","published":"2018-04-12T01:29:08.33Z","modified":"2026-06-17T01:32:10.657Z","cvss":[{"version":"3.0","score":4.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:04:25.506659Z"}]}}