Vulnerability Details : CVE-2018-0949
A security feature bypass vulnerability exists when Microsoft Internet Explorer improperly handles requests involving UNC resources, aka "Internet Explorer Security Feature Bypass Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10.
Products affected by CVE-2018-0949
- cpe:2.3:a:microsoft:internet_explorer:9:*:*:*:*:*:*:*
- cpe:2.3:a:microsoft:internet_explorer:10:*:*:*:*:*:*:*When used together with: Microsoft » Windows Server 2012
- cpe:2.3:a:microsoft:internet_explorer:11:*:*:*:*:*:*:*When used together with: Microsoft » Windows 8.1When used together with: Microsoft » Windows Rt 8.1
Exploit prediction scoring system (EPSS) score for CVE-2018-0949
0.31%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 70 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2018-0949
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
4.3
|
MEDIUM | AV:N/AC:M/Au:N/C:P/I:N/A:N |
8.6
|
2.9
|
NIST | |
6.5
|
MEDIUM | CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N |
2.8
|
3.6
|
NIST |
References for CVE-2018-0949
-
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0949
CVE-2018-0949 | Internet Explorer Security Feature Bypass VulnerabilityPatch;Vendor Advisory
-
http://www.securityfocus.com/bid/104622
Microsoft Internet Explorer CVE-2018-0949 Security Bypass VulnerabilityThird Party Advisory;VDB Entry
-
http://www.securitytracker.com/id/1041258
Microsoft Internet Explorer Multiple Flaws Let Remote Users Execute Arbitrary Code and Bypass Security Controls - SecurityTrackerThird Party Advisory;VDB Entry
Jump to