CVE-2018-8622

EPSS 1.8%◆ VulnCheck KEV

Vexday Risk Score

25Bajo

Decisión SSVC (CISA)

Attend

PoC disponible → seguir de cerca

CVSS —EPSS 1.8%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

12 dic 2018Publicada en NVD

Recomendación: Planificar corrección próxima — ya existe PoC pública.

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2008 R2. This CVE ID is unique from CVE-2018-8477, CVE-2018-8621.

Productos afectados

Microsoft · Windows 7 Microsoft · Windows 8.1 Microsoft · Windows RT 8.1 Microsoft · Windows Server 2008 Microsoft · Windows Server 2008 R2 Microsoft · Windows Server 2012 Microsoft · Windows Server 2012 R2

Referencias

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8622 http://www.securityfocus.com/bid/106088