CVE-2018-8637

2018-12-1200:00:00

microsoft

www.cve.org

6.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

26.3%

JSON

An information disclosure vulnerability exists in Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Address Space Layout Randomization (KASLR) bypass, aka “Win32k Information Disclosure Vulnerability.” This affects Windows 10 Servers, Windows 10, Windows Server 2019.

CNA Affected

[
  {
    "product": "Windows 10 Servers",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "version 1803  (Server Core Installation)"
      }
    ]
  },
  {
    "product": "Windows 10",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "Version 1803 for 32-bit Systems"
      },
      {
        "status": "affected",
        "version": "Version 1803 for ARM64-based Systems"
      },
      {
        "status": "affected",
        "version": "Version 1803 for x64-based Systems"
      },
      {
        "status": "affected",
        "version": "Version 1809 for 32-bit Systems"
      },
      {
        "status": "affected",
        "version": "Version 1809 for ARM64-based Systems"
      },
      {
        "status": "affected",
        "version": "Version 1809 for x64-based Systems"
      }
    ]
  },
  {
    "product": "Windows Server 2019",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "(Server Core installation)"
      }
    ]
  }
]