CVE-2018-0929: Infoleak
First published: Wed Mar 14 2018(Updated: )
Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allow information disclosure, due to how Internet Explorer handles objects in memory, aka "Internet Explorer Information Disclosure Vulnerability".
Credit: secure@microsoft.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Internet Explorer | =9 | |
| Microsoft Windows Server | =sp2 | |
| Internet Explorer | =10 | |
| Microsoft Windows Server | ||
| Internet Explorer | =11 | |
| Windows 10 | ||
| Windows 10 | =1511 | |
| Windows 10 | =1607 | |
| Windows 10 | =1703 | |
| Windows 10 | =1709 | |
| Microsoft Windows 7 | =sp1 | |
| Microsoft Windows | ||
| Microsoft Windows RT | ||
| Microsoft Windows Server | =r2-sp1 | |
| Microsoft Windows Server | =r2 | |
| Microsoft Windows Server 2016 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2018-0929?
CVE-2018-0929 has a severity rating of Important as it allows information disclosure.
How do I fix CVE-2018-0929?
To fix CVE-2018-0929, apply the security updates released by Microsoft for the affected versions of Internet Explorer.
Which versions of Internet Explorer are affected by CVE-2018-0929?
CVE-2018-0929 affects Internet Explorer versions 9, 10, and 11.
Does CVE-2018-0929 affect Windows 10?
CVE-2018-0929 affects specific builds of Windows 10 including 1511, 1607, 1703, and 1709.
Can CVE-2018-0929 be exploited remotely?
Yes, CVE-2018-0929 can be exploited through a maliciously crafted web page, allowing attackers to disclose information.
- agent/type
- agent/severity
- agent/author
- agent/weakness
- agent/references
- agent/remedy
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/first-publish-date
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/microsoft
- canonical/internet explorer
- version/internet explorer/9
- canonical/microsoft windows server
- version/microsoft windows server/sp2
- version/internet explorer/10
- version/internet explorer/11
- canonical/windows 10
- version/windows 10/1511
- version/windows 10/1607
- version/windows 10/1703
- version/windows 10/1709
- canonical/microsoft windows 7
- version/microsoft windows 7/sp1
- canonical/microsoft windows
- canonical/microsoft windows rt
- version/microsoft windows server/r2-sp1
- version/microsoft windows server/r2
- canonical/microsoft windows server 2016