Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2018-0888
HistoryMar 14, 2018 - 5:29 p.m.

CVE-2018-0888

2018-03-1417:29:00
CWE-20
[email protected]
web.nvd.nist.gov
69
microsoft
hyper-v
network switch
windows server
information disclosure
vulnerability
cve-2018-0888
nvd

5.6 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

5.4 Medium

AI Score

Confidence

High

4.7 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:M/Au:N/C:C/I:N/A:N

0.001 Low

EPSS

Percentile

29.1%

JSON

The Microsoft Hyper-V Network Switch in 64-bit versions of Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an information disclosure vulnerability due to how guest operating system input is validated, aka “Hyper-V Information Disclosure Vulnerability”.

Related

mscve 1
prion 1
mskb 12
cvelist 1
symantec 1
nessus 9
kaspersky 2
openvas 6
trendmicroblog 1
talosblog 1
mscve
mscve
Windows Hyper-V Information Disclosure Vulnerability
2018-03-13 07:00:00
prion
prion
Information disclosure
2018-03-14 17:29:00
mskb
mskb
Description of the security update for the Hyper-V information disclosure vulnerability in Windows Server 2008: March 13, 2018
2018-03-13 07:00:00
March 13, 2018—KB4088879 (Security-only update)
2018-03-13 07:00:00
March 13, 2018—KB4088880 (Security-only update)
2018-03-13 07:00:00
cvelist
cvelist
CVE-2018-0888
2018-03-14 00:00:00
symantec
symantec
Microsoft Windows Hyper-V CVE-2018-0888 Local Information Disclosure Vulnerability
2018-03-13 00:00:00
nessus
nessus
Security Updates for Windows Server 2008 (March 2018)
2018-03-13 00:00:00
KB4088880: Windows Server 2012 March 2018 Security Update (Meltdown)(Spectre)
2018-03-13 00:00:00
KB4088879: Windows 8.1 and Windows Server 2012 R2 March 2018 Security Update (Meltdown)(Spectre)
2018-03-13 00:00:00
kaspersky
kaspersky
KLA11778 Multiple vulnerabilities in Microsoft Products (ESU)
2018-03-13 00:00:00
KLA11207 Multiple vulnerabilities in Microsoft Windows
2018-03-13 00:00:00
openvas
openvas
Microsoft Windows Multiple Vulnerabilities (KB4088875)
2018-03-14 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB4088876)
2018-03-14 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB4088786)
2018-03-14 00:00:00
trendmicroblog
trendmicroblog
TippingPoint Threat Intelligence and Zero-Day Coverage – Week of March 12, 2018
2018-03-16 15:14:43
talosblog
talosblog
Microsoft Patch Tuesday - March 2018
2018-03-13 14:38:00

5.6 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

5.4 Medium

AI Score

Confidence

High

4.7 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:M/Au:N/C:C/I:N/A:N

0.001 Low

EPSS

Percentile

29.1%

JSON
Related for CVE-2018-0888
mscve1prion1mskb12cvelist1symantec1nessus9kaspersky2openvas6trendmicroblog1talosblog1