CVE-2018-8621

EPSS 1.8%◆ VulnCheck KEV

Vexday Risk Score

25Low

SSVC decision (CISA)

Attend

PoC available → attend closely

CVSS —EPSS 1.8%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

12 Dec 2018Published on NVD

Recommendation: Plan a near-term fix — a public PoC already exists.

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows Server 2012, Windows 7, Windows Server 2008 R2. This CVE ID is unique from CVE-2018-8477, CVE-2018-8622.

Affected products

Microsoft · Windows 7 Microsoft · Windows Server 2008 R2 Microsoft · Windows Server 2012

References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8621 http://www.securityfocus.com/bid/106085