CVE-2018-0927: microsoft corporation internet explorer, microsoft edge
Vulnerability summary
CVE-2018-0927 is a medium (CVSS 4.3) vulnerability in microsoft corporation internet explorer, microsoft edge. EPSS estimates a 5.25% chance of exploitation in the next 30 days, higher than 92.4% of scored vulnerabilities.
Timeline
- 14-03-2018PublishedVulnerability first disclosed.
- 17-09-2024Last modifiedVulnerability information updated.
Description
Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Microsoft Edge and Internet Explorer in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows information disclosure, due to how Microsoft browsers handle objects in memory, aka "Microsoft Browser Information Disclosure Vulnerability".
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
5.25%
Chance of exploitation in the next 30 days
Percentile
92%
Versus all other CVEs
30-day change
0.00 pp
From 5.25% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Microsoft1 product
- internet_explorerEOL10 | 11
Microsoft corporation1 product
- internet explorer, microsoft edgeInternet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Microsoft Edge and Internet Explorer in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709.
2 vendors · 2 products
References
3 links
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0927X Refsource CONFIRMPatchVendor Advisory