{"id":"CVE-2018-0949","aliases":["EUVD-2018-1729","GHSA-cf5q-23qm-9wq6"],"status":"published","title":"A security feature bypass vulnerability exists when Microsoft Internet Explorer improperly...","description":"A security feature bypass vulnerability exists when Microsoft Internet Explorer improperly handles requests involving UNC resources, aka \"Internet Explorer Security Feature Bypass Vulnerability.\" This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10.","severity":{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.12025,"percentile":0.96161,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2018-07-11T00:00:00Z","modified":"2026-06-17T01:31:59Z","products":[{"vendor":"microsoft","product":"internet explorer 10"},{"vendor":"microsoft","product":"internet explorer 11"},{"vendor":"microsoft","product":"internet explorer 9"},{"vendor":"microsoft","product":"internet_explorer"}],"references":[{"url":"http://www.securityfocus.com/bid/104622","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0949","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1041258","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-0949"},{"url":"https://github.com/advisories/GHSA-cf5q-23qm-9wq6"}],"sources":{"cve":[{"id":"CVE-2018-0949","description":"A security feature bypass vulnerability exists when Microsoft Internet Explorer improperly handles requests involving UNC resources, aka \"Internet Explorer Security Feature Bypass Vulnerability.\" This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10.","status":"published","published":"2018-07-11T00:00:00Z","modified":"2024-08-05T03:44:11.692Z","updated_at":"2026-11-02T14:35:12.596526Z"}],"euvd":[{"id":"EUVD-2018-1729","description":"A security feature bypass vulnerability exists when Microsoft Internet Explorer improperly handles requests involving UNC resources, aka \"Internet Explorer Security Feature Bypass Vulnerability.\" This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10.","status":"published","published":"2018-07-11T00:00:00Z","modified":"2024-08-05T03:44:11Z","updated_at":"2026-11-03T02:40:17.442322Z"}],"ghsa":[{"id":"GHSA-cf5q-23qm-9wq6","title":"A security feature bypass vulnerability exists when Microsoft Internet Explorer improperly...","description":"A security feature bypass vulnerability exists when Microsoft Internet Explorer improperly handles requests involving UNC resources, aka \"Internet Explorer Security Feature Bypass Vulnerability.\" This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10.","status":"published","published":"2022-05-13T01:48:28Z","modified":"2023-02-02T05:01:43Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T14:51:14.661617Z"}],"nvd":[{"id":"CVE-2018-0949","description":"A security feature bypass vulnerability exists when Microsoft Internet Explorer improperly handles requests involving UNC resources, aka \"Internet Explorer Security Feature Bypass Vulnerability.\" This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10.","status":"published","published":"2018-07-11T00:29:00.227Z","modified":"2026-06-17T01:31:59.59Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:04:32.929986Z"}]}}