Lucene search

MicrosoftCVE-2018-8121

HistoryJun 14, 2018 - 12:29 p.m.

CVE-2018-8121

2018-06-1412:29:00

CWE-665

microsoft

web.nvd.nist.gov

windows

kernel

information disclosure

vulnerability

cve-2018-8121

nvd

CVSS2

1.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:M/Au:N/C:P/I:N/A:N

CVSS3

4.7

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

5.3

Confidence

High

EPSS

0.002

Percentile

52.5%

JSON

An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory, aka “Windows Kernel Information Disclosure Vulnerability.” This affects Windows 10 Servers, Windows 10. This CVE ID is unique from CVE-2018-8207.

Affected configurations

Nvd

Vulners

Node

microsoftwindows_10Match1703

microsoftwindows_10Match1709

microsoftwindows_10Match1803

microsoftwindows_server_2016Match1709

microsoftwindows_server_2016Match1803

VendorProductVersionCPE
microsoftwindows_101703cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*
microsoftwindows_101709cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*
microsoftwindows_101803cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*
microsoftwindows_server_20161709cpe:2.3:o:microsoft:windows_server_2016:1709:*:*:*:*:*:*:*
microsoftwindows_server_20161803cpe:2.3:o:microsoft:windows_server_2016:1803:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
microsoft	windows_10	1703	cpe:2.3:o:microsoft:windows_10:1703:::::::*
microsoft	windows_10	1709	cpe:2.3:o:microsoft:windows_10:1709:::::::*
microsoft	windows_10	1803	cpe:2.3:o:microsoft:windows_10:1803:::::::*
microsoft	windows_server_2016	1709	cpe:2.3:o:microsoft:windows_server_2016:1709:::::::*
microsoft	windows_server_2016	1803	cpe:2.3:o:microsoft:windows_server_2016:1803:::::::*

CNA Affected

[
  {
    "product": "Windows 10 Servers",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "version 1709  (Server Core Installation)"
      },
      {
        "status": "affected",
        "version": "version 1803  (Server Core Installation)"
      }
    ]
  },
  {
    "product": "Windows 10",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "Version 1703 for 32-bit Systems"
      },
      {
        "status": "affected",
        "version": "Version 1703 for x64-based Systems"
      },
      {
        "status": "affected",
        "version": "Version 1709 for 32-bit Systems"
      },
      {
        "status": "affected",
        "version": "Version 1709 for x64-based Systems"
      },
      {
        "status": "affected",
        "version": "Version 1803 for 32-bit Systems"
      },
      {
        "status": "affected",
        "version": "Version 1803 for x64-based Systems"
      }
    ]
  }
]