CVE-2018-8350 — Microsoft Windows 10 vulnerability

4 documents4 sources
Severity
8.8HIGHNVD
EPSS
30.3%
top 3.31%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Microsoft Windows 10Microsoft Windows 10 ServersMicrosoft Windows Server
Timeline
PublishedAug 15
Latest updateMay 13

Description

A remote code execution vulnerability exists when Microsoft Windows PDF Library improperly handles objects in memory, aka "Windows PDF Remote Code Execution Vulnerability." This affects Windows 10 Servers, Windows 10.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages4 packages

▶CVEListV5microsoft/windows_10_serversversion 1709 (Server Core Installation), version 1803 (Server Core Installation)+1
▶CVEListV5microsoft/windows_106 versions+5
▶NVDmicrosoft/windows_101703, 1709, 1803+2
▶NVDmicrosoft/windows_server1709, 1803+1

Patches

Patch: portal.msrc.microsoft.com ↗Patch: portal.msrc.microsoft.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-5x4c-mvw4-g6hr: A remote code execution vulnerability exists when Microsoft Windows PDF Library improperly handles objects in memory, aka "Windows PDF Remote Code Exe↗2022-05-13
▶
CVEList
CVE-2018-8350: A remote code execution vulnerability exists when Microsoft Windows PDF Library improperly handles objects in memory, aka "Windows PDF Remote Code Exe↗2018-08-15
▶

📋Vendor Advisories

1
Microsoft
Windows PDF Remote Code Execution Vulnerability↗2018-08-14
▶
CVE-2018-8350 — Microsoft Windows 10 vulnerability | cvebase