CVE-2018-1001: High severity internet explorer vulnerability

Published Apr 12, 2018

Updated

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripting Engine Memory Corruption Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10. This CVE ID is unique from CVE-2018-0988, CVE-2018-0996.

Affected Software

16 affected components

Microsoft Internet Explorer=10

Microsoft Windows Server 2012

Microsoft Internet Explorer=11

Microsoft Windows 10

Microsoft Windows 10=1511

Microsoft Windows 10=1607

Microsoft Windows 10=1703

Microsoft Windows 10=1709

Microsoft Windows 7=sp1

Microsoft Windows 8.1

Microsoft Windows RT 8.1

Microsoft Windows Server 2008=r2-sp1

Microsoft Windows Server 2012=r2

Microsoft Windows Server 2016

Microsoft Internet Explorer=9

Microsoft Windows Server 2008=sp2

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-1001

Event History

Apr 12, 2018

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2018-1001?

CVE-2018-1001 has a high severity rating due to its potential for remote code execution.

How do I fix CVE-2018-1001?

To fix CVE-2018-1001, you should apply the latest security updates provided by Microsoft for Internet Explorer.

Which versions of Internet Explorer are affected by CVE-2018-1001?

CVE-2018-1001 affects Internet Explorer 9, Internet Explorer 10, and Internet Explorer 11.

What type of vulnerability is CVE-2018-1001?

CVE-2018-1001 is categorized as a remote code execution vulnerability.

Can CVE-2018-1001 be exploited by malicious websites?

Yes, CVE-2018-1001 can be exploited through malicious web pages that invoke the vulnerability.