CVE-2018-8469

HIGH ⚠ Exploit

An elevation of privilege vulnerability exists in Microsoft Edge that could allow an attacker to escape from the AppContainer sandbox in the browser, aka "Microsoft Edge Elevation of Privilege Vuln...

Affects 3 products across 1 vendor.

CVSS 3.07.4
EPSS15.4%
Percentile97th
PatchPatched
CVSS Vector — Plain English Remotely exploitable over the network, low complexity, no authentication required, requires user interaction, can impact systems beyond the vulnerable component, no confidentiality impact, full integrity impact, no availability impact.
◆ AI Analysis — automated analysis, not human-reviewed

A vulnerability in Microsoft Edge allows an attacker to escape the AppContainer sandbox, potentially leading to elevated privileges.

BSID: BS-2018-GLOBAL-172415-H • Model: /workspace/models/qwen2.5-coder-32b-instruct-bf16 • Confidence: MEDIUM

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →
Frequently Asked Questions
What is CVE-2018-8469?
A vulnerability in Microsoft Edge allows an attacker to escape the AppContainer sandbox, potentially leading to elevated privileges.
What is the CVSS score for CVE-2018-8469?
CVE-2018-8469 has CVSS 7.4 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N. EPSS: 15.4%.
Is CVE-2018-8469 actively exploited?
Public exploit available for CVE-2018-8469. Exploitation risk elevated.
How do I remediate CVE-2018-8469?
Priority: HIGH. Advisory: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8469 PSIRT: [email protected]
What systems are affected by CVE-2018-8469?
CVE-2018-8469 affects Microsoft Edge.
Vulnerability Details
CVE IDCVE-2018-8469
BSIDBS-2018-GLOBAL-172415-H BreachSpider Global ID
CVSS VectorCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N
Published2018-09-13
Last Modified2024-11-21
ICS Relevance0%
SourceNVD
Official Description

An elevation of privilege vulnerability exists in Microsoft Edge that could allow an attacker to escape from the AppContainer sandbox in the browser, aka "Microsoft Edge Elevation of Privilege Vulnerability." This affects Microsoft Edge. This CVE ID is unique from CVE-2018-8463.

Source: NIST NVD / MITRE CVE Database

Attack Vector Analysis — CITED Relevance

The vulnerability is exploited through a specific flaw in the handling of web content within the Microsoft Edge browser, enabling an attacker to execute arbitrary code with higher privileges than intended.

Exploitation Likelihood: MEDIUM

Affected Products
VendorProductAffected Versions
Microsoft Edge No version listed by source

Platforms listed by the source (the vulnerable product runs on these; they are not themselves vulnerable): Microsoft Windows Server 2016, Microsoft Windows 10

Remediation
View Vendor Advisory →

Remediation Priority: HIGH

Vendor PSIRT: [email protected]
Threat Intelligence
● Threat Intelligence Validated: October 2026 | Threat Age: 2955 Days
CISA known-exploitedNot in KEV catalog
Public Exploit⚠ Available — Reference
PoC CodeNot confirmed
AI Enrichment Record — provenance & audit hash
Model/workspace/models/qwen2.5-coder-32b-instruct-bf16
ConfidenceMEDIUM
Enriched At2026-05-24
Related CVEs affecting Microsoft
CVE-2026-48331 10.0 Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SS... CVE-2007-1644 10.0 The dynamic DNS update mechanism in the DNS Server service on Microsoft Windo... CVE-2009-2532 10.0 Microsoft Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold and SP2,... CVE-2012-0772 10.0 An unspecified ActiveX control in Adobe Flash Player before 10.3.183.18 and 1... CVE-2011-1300 10.0 The Program::getActiveUniformMaxLength function in libGLESv2/Program.cpp in l...
View all Microsoft CVEs →

ICS/OT Vulnerability Intelligence for Your Environment

BreachSpider tracks 384,000+ CVEs and matches them to your ICS/OT assets by exact version, with AI analysis, NERC CIP mapping, and vendor PSIRT contacts.

Create a free account →