CVE-2018-0942

EPSS 3.2%

Vexday Risk Score

3Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS —EPSS 3.2%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

14 Mar 2018Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allow elevation of privilege, due to how Internet Explorer handles zone and integrity settings, aka "Internet Explorer Elevation of Privilege Vulnerability".

Affected products

Microsoft Corporation · Internet Explorer

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0942 http://www.securityfocus.com/bid/103312 http://www.securitytracker.com/id/1040510