CVE-2018-0949
First published: Wed Jul 11 2018(Updated: )
A security feature bypass vulnerability exists when Microsoft Internet Explorer improperly handles requests involving UNC resources, aka "Internet Explorer Security Feature Bypass Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10.
Credit: secure@microsoft.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Internet Explorer | =10 | |
| Microsoft Windows Server | ||
| Internet Explorer | =11 | |
| Microsoft Windows 10 | ||
| Microsoft Windows 10 | =1607 | |
| Microsoft Windows 10 | =1703 | |
| Microsoft Windows 10 | =1709 | |
| Microsoft Windows 10 | =1803 | |
| Microsoft Windows 7 | =sp1 | |
| Microsoft Windows 8.1 | ||
| Microsoft Windows RT | ||
| Microsoft Windows Server | =r2-sp1 | |
| Microsoft Windows Server | =r2 | |
| Microsoft Windows Server 2016 | ||
| Internet Explorer | =9 | |
| Microsoft Windows Server | =sp2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2018-0949?
CVE-2018-0949 is classified as a security feature bypass vulnerability.
How do I fix CVE-2018-0949?
To mitigate CVE-2018-0949, users should apply the latest security updates from Microsoft for Internet Explorer.
Which versions of Internet Explorer are affected by CVE-2018-0949?
CVE-2018-0949 affects Internet Explorer 9, 10, and 11.
Can CVE-2018-0949 be exploited remotely?
Yes, CVE-2018-0949 can potentially be exploited remotely through crafted web content.
What impact does CVE-2018-0949 have on users?
CVE-2018-0949 may allow attackers to bypass security measures in Internet Explorer, potentially leading to unauthorized access.
- agent/type
- agent/severity
- agent/author
- agent/references
- agent/remedy
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/event
- agent/first-publish-date
- agent/source
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/microsoft
- canonical/internet explorer
- version/internet explorer/10
- canonical/microsoft windows server
- version/internet explorer/11
- canonical/microsoft windows 10
- version/microsoft windows 10/1607
- version/microsoft windows 10/1703
- version/microsoft windows 10/1709
- version/microsoft windows 10/1803
- canonical/microsoft windows 7
- version/microsoft windows 7/sp1
- canonical/microsoft windows 8.1
- canonical/microsoft windows rt
- version/microsoft windows server/r2-sp1
- version/microsoft windows server/r2
- canonical/microsoft windows server 2016
- version/internet explorer/9
- version/microsoft windows server/sp2