CVE-2018-0954: High severity microsoft edge beta vulnerability
A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability." This affects Internet Explorer 9, ChakraCore, Internet Explorer 11, Microsoft Edge, Internet Explorer 10. This CVE ID is unique from CVE-2018-0945, CVE-2018-0946, CVE-2018-0951, CVE-2018-0953, CVE-2018-0955, CVE-2018-1022, CVE-2018-8114, CVE-2018-8122, CVE-2018-8128, CVE-2018-8137, CVE-2018-8139.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2018-0954?
CVE-2018-0954 is rated as critical due to its potential for remote code execution.
How do I fix CVE-2018-0954?
To fix CVE-2018-0954, ensure that you apply the latest security updates and patches provided by Microsoft for affected products.
Which Microsoft products are affected by CVE-2018-0954?
CVE-2018-0954 affects Internet Explorer 9, 10, 11, Microsoft Edge, and ChakraCore versions up to 1.8.4.
What types of attacks can be executed using CVE-2018-0954?
Exploitation of CVE-2018-0954 can allow attackers to execute arbitrary code on an affected system.
Is there a workaround for CVE-2018-0954?
While the best defense is to install security updates, users can mitigate risks by disabling scripting or using alternative browsers.