CVE-2018-1020

7.5 highEPSS 17%

A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Corruption Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10. This CVE ID is unique from CVE-2018-0870, CVE-2018-0991, CVE-2018-0997, CVE-2018-1018.

Severity

CVSS 3.0

7.5 high

CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 17% chance of exploitation in the next 30 days; higher than 97% of CVEs (scores of 2026-10-31)
CWE: CWE-787
Published: 2018-04-12
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

microsoft:internet_explorer

References

http://www.securityfocus.com/bid/103612
http://www.securitytracker.com/id/1040653
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-1020
http://www.securityfocus.com/bid/103612
http://www.securitytracker.com/id/1040653

Check your stack JSON