CVE-2018-0932: microsoft corporation internet explorer, microsoft edge
Vulnerability summary
CVE-2018-0932 is a medium (CVSS 4.3) vulnerability in microsoft corporation internet explorer, microsoft edge. EPSS estimates a 5.85% chance of exploitation in the next 30 days, higher than 93% of scored vulnerabilities.
Timeline
- 14-03-2018PublishedVulnerability first disclosed.
- 16-09-2024Last modifiedVulnerability information updated.
Description
Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Microsoft Edge and Internet Explorer in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows information disclosure, due to how Microsoft browsers handle objects in memory, aka "Microsoft Browser Information Disclosure Vulnerability".
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
5.85%
Chance of exploitation in the next 30 days
Percentile
93%
Versus all other CVEs
30-day change
0.00 pp
From 5.85% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Microsoft1 product
- internet_explorerEOL11
Microsoft corporation1 product
- internet explorer, microsoft edgeInternet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Microsoft Edge and Internet Explorer in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709.
2 vendors · 2 products
References
3 links
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0932X Refsource CONFIRMPatchVendor Advisory