CVE-2018-1020
First published: Thu Apr 12 2018(Updated: )
A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Corruption Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10. This CVE ID is unique from CVE-2018-0870, CVE-2018-0991, CVE-2018-0997, CVE-2018-1018.
Credit: secure@microsoft.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Internet Explorer | =10 | |
| Microsoft Windows Server | ||
| Internet Explorer | =11 | |
| Windows 10 | ||
| Windows 10 | =1511 | |
| Windows 10 | =1607 | |
| Windows 10 | =1703 | |
| Windows 10 | =1709 | |
| Microsoft Windows 7 | =sp1 | |
| Microsoft Windows | ||
| Microsoft Windows RT | ||
| Microsoft Windows Server | =r2-sp1 | |
| Microsoft Windows Server | =r2 | |
| Microsoft Windows Server 2016 | ||
| Internet Explorer | =9 | |
| Microsoft Windows Server | =sp2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2018-1020?
CVE-2018-1020 has been assigned a critical severity rating due to its potential for remote code execution.
How do I fix CVE-2018-1020?
To fix CVE-2018-1020, users should apply the latest security updates provided by Microsoft for Internet Explorer.
Which versions of Internet Explorer are affected by CVE-2018-1020?
CVE-2018-1020 affects Internet Explorer versions 9, 10, and 11.
Can CVE-2018-1020 be exploited remotely?
Yes, CVE-2018-1020 can be exploited remotely if a user visits a malicious website crafted to take advantage of the vulnerability.
Is CVE-2018-1020 still a risk for users of supported Windows versions?
Yes, users of supported Windows versions running affected Internet Explorer versions are still at risk if they do not apply the necessary security updates.
- agent/type
- agent/severity
- agent/author
- agent/weakness
- agent/references
- agent/remedy
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/first-publish-date
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/microsoft
- canonical/internet explorer
- version/internet explorer/10
- canonical/microsoft windows server
- version/internet explorer/11
- canonical/windows 10
- version/windows 10/1511
- version/windows 10/1607
- version/windows 10/1703
- version/windows 10/1709
- canonical/microsoft windows 7
- version/microsoft windows 7/sp1
- canonical/microsoft windows
- canonical/microsoft windows rt
- version/microsoft windows server/r2-sp1
- version/microsoft windows server/r2
- canonical/microsoft windows server 2016
- version/internet explorer/9
- version/microsoft windows server/sp2