CVE-2018-0987: Medium severity internet explorer vulnerability

Published Apr 12, 2018

Updated

An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory in Internet Explorer, aka "Scripting Engine Information Disclosure Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10. This CVE ID is unique from CVE-2018-0981, CVE-2018-0989, CVE-2018-1000.

Affected Software

16 affected components

Microsoft Internet Explorer=10

Microsoft Windows Server 2012

Microsoft Internet Explorer=11

Microsoft Windows 10

Microsoft Windows 10=1511

Microsoft Windows 10=1607

Microsoft Windows 10=1703

Microsoft Windows 10=1709

Microsoft Windows 7=sp1

Microsoft Windows 8.1

Microsoft Windows RT 8.1

Microsoft Windows Server 2008=r2-sp1

Microsoft Windows Server 2012=r2

Microsoft Windows Server 2016

Microsoft Internet Explorer=9

Microsoft Windows Server 2008=sp2

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0987

Event History

Apr 12, 2018

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2018-0987?

CVE-2018-0987 has a severity rating of important, indicating that it could potentially lead to information disclosure.

How do I fix CVE-2018-0987?

To mitigate CVE-2018-0987, users should install the latest security updates released by Microsoft for Internet Explorer.

What versions of Internet Explorer are affected by CVE-2018-0987?

CVE-2018-0987 affects Internet Explorer 9, 10, and 11.

Can CVE-2018-0987 be exploited remotely?

Yes, CVE-2018-0987 can be potentially exploited remotely through malicious web pages.

What are the potential impacts of CVE-2018-0987?

The main impact of CVE-2018-0987 is that it can result in the unintended disclosure of sensitive information from the memory of the affected system.