Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
4.3
CVE-2018-8530: Microsoft Edge may let cross-site requests bypass protection
CVE-2018-8530 · published 8 years ago
Summary
Microsoft Edge can incorrectly handle requests coming from other websites, allowing them to slip past built‑in security checks. This could let malicious sites perform actions on behalf of users without permission. Update Edge to the latest version or apply the vendor's recommended patch as soon as possible.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| microsoft | edge |
All versions
cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:* |
Original advisory text
A security feature bypass vulnerability exists when Microsoft Edge improperly handles requests of different origins, aka "Microsoft Edge Security Feature Bypass Vulnerability." This affects Microso...
A security feature bypass vulnerability exists when Microsoft Edge improperly handles requests of different origins, aka "Microsoft Edge Security Feature Bypass Vulnerability." This affects Microsoft Edge. This CVE ID is unique from CVE-2018-8512.
References
- http://www.securityfocus.com/bid/105487 Third Party Advisory VDB Entry
- http://www.securitytracker.com/id/1041825 Third Party Advisory VDB Entry
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8530 Patch Vendor Advisory
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published10 Oct 2018
Updated22 Oct 2026
First seen29 Sep 2026
Sources
CVE-2018-8530 · NVD
Track software like this
Free during beta