PT-2018-9160 · Microsoft · Windows Server 2016+9
Published
2018-03-06
·
Updated
2018-04-06
·
CVE-2018-0932
CVSS v3.1
4.3
Medium
| Vector | AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N |
Name of the Vulnerable Software and Affected Versions:
Internet Explorer versions in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1, Windows RT 8.1, Windows Server 2012, and Windows Server 2012 R2
Microsoft Edge and Internet Explorer versions in Windows 10 Gold, 1511, 1607, 1703, 1709
Windows Server 2016 and Windows Server, version 1709
Description:
An information disclosure issue exists due to how Microsoft browsers handle objects in memory. This could allow an attacker to obtain information to further compromise the user's system.
Recommendations:
For Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1, Windows RT 8.1, Windows Server 2012, and Windows Server 2012 R2, update to a newer version that includes the fix for this issue.
For Microsoft Edge and Internet Explorer in Windows 10 Gold, 1511, 1607, 1703, 1709, update to a newer version that includes the fix for this issue.
For Windows Server 2016 and Windows Server, version 1709, update to a newer version that includes the fix for this issue.
As a temporary workaround, consider restricting access to sensitive information until a patch is available.
Fix
Information Disclosure
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Edge
Internet Explorer
Windows 10
Windows 7
Windows 8.1
Windows Rt 8.1
Windows Server 2008 R2
Windows Server 2012
Windows Server 2012 R2
Windows Server 2016