Windows Kernel Information Disclosure Vulnerability

🗓️ 13 Nov 2018 08:00:00Reported by MicrosoftType

mscve

mscve🔗 msrc.microsoft.com👁 24 Views

Windows Kernel Information Disclosure Vulnerability. Vulnerability in Windows kernel object initialization. Allows attacker to obtain user system information. Update corrects object initialization.

Reporter	Title	Published	Views	Family All 46
ATTACKERKB	CVE-2018-8408	14 Nov 201801:29	–	attackerkb
Circl	CVE-2018-8408	14 Nov 201817:39	–	circl
CNVD	Microsoft Windows Kernel Information Disclosure Vulnerability (CNVD-2019-05536)	16 Nov 201800:00	–	cnvd
Check Point Advisories	Microsoft Windows Kernel Information Disclosure (CVE-2018-8408)	13 Nov 201800:00	–	checkpoint_advisories
CVE	CVE-2018-8408	14 Nov 201801:00	–	cve
Cvelist	CVE-2018-8408	14 Nov 201801:00	–	cvelist
EUVD	EUVD-2018-20046	7 Oct 202500:30	–	euvd
Microsoft KB	November 13, 2018—KB4467106 (Security-only update)	13 Nov 201808:00	–	mskb
Microsoft KB	November 13, 2018—KB4467107 (Monthly Rollup)	13 Nov 201808:00	–	mskb
Microsoft KB	November 13, 2018—KB4467678 (Security-only update)	13 Nov 201808:00	–	mskb

Vulners

Node

microsoft windows_10_1803x64

OR

microsoft windows_10

OR

microsoft windows_server_2012_r2x64

OR

microsoft windows_server_2012_r2x64

OR

microsoft windows_server_2012_r2x64

OR

microsoft windows_server_2012_r2x64

OR

microsoft windows_server_2012x64

OR

microsoft windows_server_2012x64

OR

microsoft windows_server_2012x64

OR

microsoft windows_server_2012x64

OR

microsoft windows_server_2008_r2x64

OR

microsoft windows_server_2008_r2x64

OR

microsoft windows_server_2008_r2x64

OR

microsoft windows_server_2008_r2x64

OR

microsoft windows_server_2008_r2itanium

OR

microsoft windows_server_2008_r2itanium

OR

microsoft windows_server_2008_sp2x86

OR

microsoft windows_server_2008_sp2x86

OR

microsoft windows_server_2008_sp2x86

OR

microsoft windows_server_2008_sp2x86

OR

microsoft windows_server_2008itanium

OR

microsoft windows_server_2008itanium

OR

microsoft windows_server_2008_sp2x64

OR

microsoft windows_server_2008_sp2x64

OR

microsoft windows_server_2008_sp2x64

OR

microsoft windows_server_2008_sp2x64

OR

microsoft windows_rt_8.1

OR

microsoft windows_8.1x64

OR

microsoft windows_8.1x64

OR

microsoft windows_8.1x86

OR

microsoft windows_8.1x86

OR

microsoft windows_7x64

OR

microsoft windows_7x64

OR

microsoft windows_7x86

OR

microsoft windows_7x86

OR

microsoft windows_server_2016

OR

microsoft windows_server_2016

OR

microsoft windows_10_1607x64

OR

microsoft windows_10_1607x86

OR

microsoft windows_10_1507x64

OR

microsoft windows_10_1507x86

OR

microsoft windows_10

OR

microsoft windows_10

OR

microsoft windows_server_1803

OR

microsoft windows_10_1803x64

OR

microsoft windows_10_1809x64

OR

microsoft windows_10

OR

microsoft windows_10

OR

microsoft windows_server_1709

13 Nov 2018 08:00Current

3.1Low risk

Vulners AI Score3.1

CVSS 22.1

CVSS 33.3 - 5.5

EPSS0.01757

windows kernel information disclosure vulnerability memory initialization authenticated attacker user system update microsoft