First published: Thu Apr 12 2018(Updated: )
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripting Engine Memory Corruption Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10. This CVE ID is unique from CVE-2018-0996, CVE-2018-1001.
Credit: secure@microsoft.com
Affected Software | Affected Version | How to fix |
---|---|---|
Internet Explorer | =10 | |
Microsoft Windows Server 2012 x64 | ||
Internet Explorer | =11 | |
Microsoft Windows 10 | ||
Microsoft Windows 10 | =1511 | |
Microsoft Windows 10 | =1607 | |
Microsoft Windows 10 | =1703 | |
Microsoft Windows 10 | =1709 | |
Microsoft Windows 7 | =sp1 | |
Microsoft Windows 8.1 | ||
Microsoft Windows RT | ||
Microsoft Windows Server 2008 Itanium | =r2-sp1 | |
Microsoft Windows Server 2016 | ||
Internet Explorer | =9 | |
Microsoft Windows Server 2008 Itanium | =sp2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2018-0988 has a critical severity rating as it enables remote code execution.
To fix CVE-2018-0988, update Internet Explorer to the latest version using official Microsoft updates.
CVE-2018-0988 affects Internet Explorer 9, 10, and 11.
Yes, CVE-2018-0988 can be exploited remotely, allowing an attacker to run arbitrary code.”},{