{"id":"CVE-2018-8530","aliases":["EUVD-2018-20154","GHSA-7f9f-g56v-548g"],"status":"published","title":"A security feature bypass vulnerability exists when Microsoft Edge improperly handles requests of...","description":"A security feature bypass vulnerability exists when Microsoft Edge improperly handles requests of different origins, aka \"Microsoft Edge Security Feature Bypass Vulnerability.\" This affects Microsoft Edge. This CVE ID is unique from CVE-2018-8512.","severity":{"version":"3.0","score":4.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.05473,"percentile":0.9281,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2018-10-10T13:00:00Z","modified":"2026-06-17T02:05:02Z","products":[{"vendor":"microsoft","product":"edge"},{"vendor":"microsoft","product":"microsoft edge"}],"references":[{"url":"http://www.securityfocus.com/bid/105487","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1041825","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8530","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-8530"},{"url":"https://github.com/advisories/GHSA-7f9f-g56v-548g"}],"sources":{"cve":[{"id":"CVE-2018-8530","description":"A security feature bypass vulnerability exists when Microsoft Edge improperly handles requests of different origins, aka \"Microsoft Edge Security Feature Bypass Vulnerability.\" This affects Microsoft Edge. This CVE ID is unique from CVE-2018-8512.","status":"published","published":"2018-10-10T13:00:00Z","modified":"2024-08-05T07:02:24.473Z","updated_at":"2026-11-02T14:35:04.172099Z"}],"euvd":[{"id":"EUVD-2018-20154","description":"A security feature bypass vulnerability exists when Microsoft Edge improperly handles requests of different origins, aka \"Microsoft Edge Security Feature Bypass Vulnerability.\" This affects Microsoft Edge. This CVE ID is unique from CVE-2018-8512.","status":"published","published":"2018-10-10T13:00:00Z","modified":"2024-08-05T07:02:24Z","updated_at":"2026-11-03T02:40:02.600498Z"}],"ghsa":[{"id":"GHSA-7f9f-g56v-548g","title":"A security feature bypass vulnerability exists when Microsoft Edge improperly handles requests of...","description":"A security feature bypass vulnerability exists when Microsoft Edge improperly handles requests of different origins, aka \"Microsoft Edge Security Feature Bypass Vulnerability.\" This affects Microsoft Edge. This CVE ID is unique from CVE-2018-8512.","status":"published","published":"2022-05-13T01:53:44Z","modified":"2023-02-02T05:02:20Z","cvss":[{"version":"3.0","score":4.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T14:51:24.995331Z"}],"nvd":[{"id":"CVE-2018-8530","description":"A security feature bypass vulnerability exists when Microsoft Edge improperly handles requests of different origins, aka \"Microsoft Edge Security Feature Bypass Vulnerability.\" This affects Microsoft Edge. This CVE ID is unique from CVE-2018-8512.","status":"published","published":"2018-10-10T13:29:06.137Z","modified":"2026-06-17T02:05:02.97Z","cvss":[{"version":"3.0","score":4.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:04:44.873741Z"}]}}