Vulnerability Details : CVE-2018-0942
Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allow elevation of privilege, due to how Internet Explorer handles zone and integrity settings, aka "Internet Explorer Elevation of Privilege Vulnerability".
Vulnerability category: Gain privilege
Products affected by CVE-2018-0942
- cpe:2.3:a:microsoft:internet_explorer:11:-:*:*:*:*:*:*When used together with: Microsoft » Windows 8.1
Exploit prediction scoring system (EPSS) score for CVE-2018-0942
0.48%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 76 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2018-0942
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
2.1
|
LOW | AV:N/AC:H/Au:S/C:P/I:N/A:N |
3.9
|
2.9
|
NIST | |
2.6
|
LOW | CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:C/C:L/I:N/A:N |
1.0
|
1.4
|
NIST |
References for CVE-2018-0942
-
http://www.securityfocus.com/bid/103312
Microsoft Internet Explorer CVE-2018-0942 Remote Privilege Escalation VulnerabilityThird Party Advisory;VDB Entry
-
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0942
CVE-2018-0942 | Internet Explorer Elevation of Privilege VulnerabilityPatch;Vendor Advisory
-
http://www.securitytracker.com/id/1040510
Microsoft Internet Explorer Multiple Flaws Let Remote Users Execute Arbitrary Code, Bypass Sandbox Restrictions, and Obtain Potentially Sensitive Information - SecurityTrackerThird Party Advisory;VDB Entry
Jump to