PT-2018-9167

CVE-2018-0949

·

Published

2018-07-10

·

Updated

2019-10-03

Description by

CVSS 3.1
6.5
Medium
MetricsAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer versions 9 through 11
Description: A security feature bypass issue exists due to Microsoft Internet Explorer's improper handling of requests involving UNC resources. This could allow an attacker to force the browser to load restricted data.
Recommendations: For versions 9 through 11, update to a version that properly handles UNC resource requests to prevent the security feature bypass.
Exploitability
Fix
Researchers
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾