What is CVE-2018-0942?

CVE-2018-0942 is a security advisory published by Microsoft Security Response Center (MSRC) with High severity. Internet Explorer Elevation of Privilege Vulnerability

Which CVE IDs does CVE-2018-0942 cover?

CVE-2018-0942 covers the following CVE IDs: CVE-2018-0942. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of CVE-2018-0942?

CVE-2018-0942 has a CVSS v3 base score of 3.0, published by Microsoft Security Response Center (MSRC).

Which products are affected by CVE-2018-0942?

CVE-2018-0942 affects 16 products, including: Internet Explorer 11 on Windows 10 Version 1511 for 32-bit Systems; Internet Explorer 11 on Windows 10 Version 1511 for x64-based Systems; Internet Explorer 11 on Windows 10 Version 1607 for 32-bit Systems; Internet Explorer 11 on Windows 10 Version 1607 for x64-based Systems; Internet Explorer 11 on Windows 10 Version 1703 for 32-bit Systems; and others — see the full list on the advisory page.

CVE-2018-0942HighCVSS 3.0

Internet Explorer Elevation of Privilege Vulnerability

Vendor

Microsoft Security Response Center (MSRC)

Published

March 13, 2018

Last Modified

—

🔗 CVE IDs covered (1)

CVE-2018-0942 →

📋 Description

An elevation of privilege vulnerability exists when Internet Explorer fails a check, allowing sandbox escape. An attacker who successfully exploited the vulnerability could use the sandbox escape to elevate privileges on an affected system. This vulnerability by itself does not allow arbitrary code execution; however, it could allow arbitrary code to be run if the attacker uses it in combination with another vulnerability (such as a remote code execution vulnerability or another elevation of privilege vulnerability) that is capable of leveraging the elevated privileges when code execution is attempted. The update addresses the vulnerability by correcting how Internet Explorer handles zone and integrity settings.

🎯 Affected products16

Internet Explorer 11 on Windows 10 Version 1511 for 32-bit Systems
Internet Explorer 11 on Windows 10 Version 1511 for x64-based Systems
Internet Explorer 11 on Windows 10 Version 1607 for 32-bit Systems
Internet Explorer 11 on Windows 10 Version 1607 for x64-based Systems
Internet Explorer 11 on Windows 10 Version 1703 for 32-bit Systems
Internet Explorer 11 on Windows 10 Version 1703 for x64-based Systems
Internet Explorer 11 on Windows 10 for 32-bit Systems
Internet Explorer 11 on Windows 10 for x64-based Systems
Internet Explorer 11 on Windows 7 for 32-bit Systems Service Pack 1
Internet Explorer 11 on Windows 7 for x64-based Systems Service Pack 1
Internet Explorer 11 on Windows 8.1 for 32-bit systems
Internet Explorer 11 on Windows 8.1 for x64-based systems
Internet Explorer 11 on Windows RT 8.1
Internet Explorer 11 on Windows Server 2008 R2 for x64-based Systems Service Pack 1
Internet Explorer 11 on Windows Server 2012 R2
Internet Explorer 11 on Windows Server 2016

✅ Remediation

KB4088876 (Monthly Rollup) KB4089187 (IE Cumulative) KB4088875 (Monthly Rollup) KB4096040 (IE Cumulative) KB4088786 (Security Update) KB4088779 (Security Update) KB4088787 (Security Update) KB4088782 (Security Update)

🔗 CVE IDs covered (1)

📋 Description

🎯 Affected products16

✅ Remediation

🔗 References (9)