Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
4.3
CVE-2018-8358: Microsoft Edge allows security feature bypass via redirects
CVE-2018-8358 · published 8 years ago
Summary
Microsoft Edge can be tricked into skipping its security checks when it follows certain redirect links. This could let attackers run unwanted actions or see data they shouldn't. Update Edge to the latest version or apply the recommended patches to close the gap.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| microsoft | edge |
All versions
cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:* |
Original advisory text
A security feature bypass vulnerability exists when Microsoft Edge improperly handles redirect requests, aka "Microsoft Edge Security Feature Bypass Vulnerability." This affects Microsoft Edge.
A security feature bypass vulnerability exists when Microsoft Edge improperly handles redirect requests, aka "Microsoft Edge Security Feature Bypass Vulnerability." This affects Microsoft Edge.
References
- http://www.securityfocus.com/bid/105017 Third Party Advisory VDB Entry
- http://www.securitytracker.com/id/1041457 Third Party Advisory VDB Entry
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8358 Patch Vendor Advisory
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published15 Aug 2018
Updated20 Oct 2026
First seen29 Sep 2026
Sources
CVE-2018-8358 · NVD
Track software like this
Free during beta