CVE-2018-0927: Infoleak

Published Mar 14, 2018

Updated

Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Microsoft Edge and Internet Explorer in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows information disclosure, due to how Microsoft browsers handle objects in memory, aka "Microsoft Browser Information Disclosure Vulnerability".

Affected Software

16 affected components

Microsoft Internet Explorer=10

Microsoft Windows Server 2012

Microsoft Internet Explorer=11

Microsoft Windows 10

Microsoft Windows 10=1511

Microsoft Windows 10=1607

Microsoft Windows 10=1703

Microsoft Windows 10=1709

Microsoft Windows 7=sp1

Microsoft Windows 8.1

Microsoft Windows RT 8.1

Microsoft Windows Server 2008=r2-sp1

Microsoft Windows Server 2012=r2

Microsoft Windows Server 2016

Microsoft Edge

Microsoft Windows Server 2016

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0927

Event History

Mar 14, 2018

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2018-0927?

CVE-2018-0927 has a severity rating of 'Important' as it allows information disclosure.

How do I fix CVE-2018-0927?

To fix CVE-2018-0927, ensure that you apply the latest security updates provided by Microsoft for affected versions of Internet Explorer.

Which operating systems are affected by CVE-2018-0927?

CVE-2018-0927 affects Internet Explorer on Windows 7 SP1, Windows 8.1, and various Windows Server versions.

Is Microsoft Edge affected by CVE-2018-0927?

Yes, Microsoft Edge on certain versions of Windows 10 is also affected by CVE-2018-0927.

Can CVE-2018-0927 lead to data breaches?

Yes, exploitation of CVE-2018-0927 can potentially lead to unauthorized information disclosure, which may result in data breaches.