CVE-2018-8121

low-risk
Published 2018-06-14

An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 10 Servers, Windows 10. This CVE ID is unique from CVE-2018-8207.

Do I need to act?

-
0.71% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
4
CVSS 4.7/10 Medium
LOCAL / HIGH complexity

Affected Products (5)

Affected Vendors

Microsoft

References (6)

Third Party Advisory http://www.securityfocus.com/bid/104380
Third Party Advisory http://www.securitytracker.com/id/1041113
Patch https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8121
Third Party Advisory http://www.securityfocus.com/bid/104380
Third Party Advisory http://www.securitytracker.com/id/1041113
Patch https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8121
26
/ 100
low-risk
Severity 12/34 · Low
Exploitability 2/34 · Minimal
Exposure 12/34 · Low