CVE-2018-8621

EPSS 1.8%◆ VulnCheck KEV

Vexday Risk Score

25Bajo

Decisión SSVC (CISA)

Attend

PoC disponible → seguir de cerca

CVSS —EPSS 1.8%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

12 dic 2018Publicada en NVD

Recomendación: Planificar corrección próxima — ya existe PoC pública.

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows Server 2012, Windows 7, Windows Server 2008 R2. This CVE ID is unique from CVE-2018-8477, CVE-2018-8622.

Productos afectados

Microsoft · Windows 7 Microsoft · Windows Server 2008 R2 Microsoft · Windows Server 2012

Referencias

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8621 http://www.securityfocus.com/bid/106085