First published: Wed Mar 14 2018(Updated: )
Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0889, CVE-2018-0893, CVE-2018-0925, and CVE-2018-0935.
Credit: secure@microsoft.com
Affected Software | Affected Version | How to fix |
---|---|---|
Microsoft Edge | ||
Microsoft Windows 10 | ||
Microsoft Windows 10 | =1511 | |
Microsoft Windows 10 | =1607 | |
Microsoft Windows 10 | =1703 | |
Microsoft Windows 10 | =1709 | |
Microsoft Windows Server 2016 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2018-0876 is classified as a remote code execution vulnerability, which is considered critical.
To fix CVE-2018-0876, ensure that you apply the latest security updates from Microsoft for Microsoft Edge and affected Windows versions.
CVE-2018-0876 affects Microsoft Edge on Windows 10 Gold, 1511, 1607, 1703, and 1709.
CVE-2018-0876 does not affect Windows Server 2016 as it is not listed as vulnerable for that operating system.
CVE-2018-0876 is specifically a scripting engine memory corruption vulnerability.