CVE-2018-0987

Summary

An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory in Internet Explorer, aka "Scripting Engine Information Disclosure Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10. This CVE ID is unique from CVE-2018-0981, CVE-2018-0989, CVE-2018-1000.

Impact & exploitability

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Affected products we track (2)

Recommendation

Apply the vendor fix in your normal patch cycle. Open any affected product above for its exact safe version.

Official patch: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0987 ↗

Additional information

• NVD record
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0987Patch
• http://www.securityfocus.com/bid/103623Advisory
• http://www.securitytracker.com/id/1040653Advisory