4.3
CVE-2018-0987
- EPSS 6.21%
- Veröffentlicht 12.04.2018 01:29:07
- Zuletzt bearbeitet 21.11.2024 03:39:22
- Erkennungen
An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory in Internet Explorer, aka "Scripting Engine Information Disclosure Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10. This CVE ID is unique from CVE-2018-0981, CVE-2018-0989, CVE-2018-1000.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Microsoft ≫ Internet Explorer Version 10
Microsoft ≫ Internet Explorer Version 11
Microsoft ≫ Windows 10 Version -
Microsoft ≫ Windows 10 Version 1511
Microsoft ≫ Windows 10 Version 1607
Microsoft ≫ Windows 10 Version 1703
Microsoft ≫ Windows 10 Version 1709
Microsoft ≫ Windows 7 Update sp1
Microsoft ≫ Windows 8.1
Microsoft ≫ Windows Rt 8.1
Microsoft ≫ Windows Server 2008 Version r2 Update sp1
Microsoft ≫ Windows Server 2012 Version r2
Microsoft ≫ Windows Server 2016
Microsoft ≫ Windows 10 Version 1511
Microsoft ≫ Windows 10 Version 1607
Microsoft ≫ Windows 10 Version 1703
Microsoft ≫ Windows 10 Version 1709
Microsoft ≫ Windows 7 Update sp1
Microsoft ≫ Windows 8.1
Microsoft ≫ Windows Rt 8.1
Microsoft ≫ Windows Server 2008 Version r2 Update sp1
Microsoft ≫ Windows Server 2012 Version r2
Microsoft ≫ Windows Server 2016
Microsoft ≫ Internet Explorer Version 9
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 6.21% | 0.929 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 4.3 | 2.8 | 1.4 |
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
|
| NIST | 4.3 | 8.6 | 2.9 |
AV:N/AC:M/Au:N/C:P/I:N/A:N
|
http://www.securitytracker.com/id/1040653
http://www.securityfocus.com/bid/103623
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0987