First published: Thu Apr 12 2018(Updated: )
An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory in Internet Explorer, aka "Scripting Engine Information Disclosure Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10. This CVE ID is unique from CVE-2018-0981, CVE-2018-0989, CVE-2018-1000.
Credit: secure@microsoft.com
Affected Software | Affected Version | How to fix |
---|---|---|
Internet Explorer | =10 | |
Microsoft Windows Server 2012 x64 | ||
Internet Explorer | =11 | |
Microsoft Windows 10 | ||
Microsoft Windows 10 | =1511 | |
Microsoft Windows 10 | =1607 | |
Microsoft Windows 10 | =1703 | |
Microsoft Windows 10 | =1709 | |
Microsoft Windows 7 | =sp1 | |
Microsoft Windows 8.1 | ||
Microsoft Windows RT | ||
Microsoft Windows Server 2008 Itanium | =r2-sp1 | |
Microsoft Windows Server 2012 x64 | =r2 | |
Microsoft Windows Server 2016 | ||
Internet Explorer | =9 | |
Microsoft Windows Server 2008 Itanium | =sp2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2018-0987 has a severity rating of important, indicating that it could potentially lead to information disclosure.
To mitigate CVE-2018-0987, users should install the latest security updates released by Microsoft for Internet Explorer.
CVE-2018-0987 affects Internet Explorer 9, 10, and 11.
Yes, CVE-2018-0987 can be potentially exploited remotely through malicious web pages.
The main impact of CVE-2018-0987 is that it can result in the unintended disclosure of sensitive information from the memory of the affected system.