CVE-2018-0889

N/A

Published: March 14, 2018 at 05:00 PM UTC

Updated: June 17, 2026 at 01:31 AM UTC

9 products affected across 1 vendorInternet ExplorerWindows Server 2016Windows Server 2012

Using Microsoft Edge by Microsoft Corporation?

Get instant alerts when new vulnerabilities affect Microsoft Edge - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 16%

Description

Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0876, CVE-2018-0893, CVE-2018-0925, and CVE-2018-0935.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Internet Explorer · Microsoft

95%

10 11 9

microsoft-windows-10 (environment) · microsoft-windows-7 (environment) · microsoft-windows-8-1 (environment) · microsoft-windows-rt-8-1 (environment) · microsoft-windows-server-2008 (environment) · microsoft-windows-server-2012 (environment) · microsoft-windows-server-2016 (environment)

Edge · Microsoft

60%

Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016.

Windows 10 · Microsoftdevice

80%

All versions

Windows 7 · Microsoftdevice

80%

All versions

Windows 8-1 · Microsoftdevice

80%

All versions