CVE-2018-0942

LOW

Microsoft Windows - Privilege Escalation

Title source: llm
STIX 2.1

Description

Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allow elevation of privilege, due to how Internet Explorer handles zone and integrity settings, aka "Internet Explorer Elevation of Privilege Vulnerability".

References (3)

Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1040510
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/103312

Scores

CVSS v3 2.6
EPSS 0.0314
EPSS Percentile 86.6%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:C/C:L/I:N/A:N

Details

Status published
Products (1)
microsoft/internet_explorer 11
Published Mar 14, 2018
Tracked Since Feb 18, 2026