CVE-2018-0892: Infoleak

Published Apr 12, 2018

Updated

An information disclosure vulnerability exists when Microsoft Edge improperly handles objects in memory, aka "Microsoft Edge Information Disclosure Vulnerability." This affects Microsoft Edge. This CVE ID is unique from CVE-2018-0998.

Affected Software

6 affected components

Microsoft Edge

Microsoft Windows 10=1511

Microsoft Windows 10=1607

Microsoft Windows 10=1703

Microsoft Windows 10=1709

Microsoft Windows Server 2016

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0892

Event History

Apr 12, 2018

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2018-0892?

CVE-2018-0892 has been classified as a moderate severity information disclosure vulnerability.

How do I fix CVE-2018-0892?

To mitigate CVE-2018-0892, ensure that Microsoft Edge is updated to the latest version.

What versions of Microsoft Edge are affected by CVE-2018-0892?

CVE-2018-0892 affects Microsoft Edge across all versions of the browser prior to the update that addresses this vulnerability.

Can CVE-2018-0892 lead to further attacks?

Yes, CVE-2018-0892 can potentially be exploited to disclose sensitive information, which may lead to further attacks.

Is CVE-2018-0892 specific to any particular Windows version?

CVE-2018-0892 is specific to Microsoft Edge and does not apply directly to particular Windows versions like Windows 10 or Windows Server 2016.