CVE-2018-8506 — Sensitive Information Exposure in Microsoft Windows 10

5 documents5 sources
Severity
5.5MEDIUMNVD
EPSS
18.7%
top 4.70%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
4
Microsoft Windows 10Microsoft Windows 10 ServersMicrosoft Windows Server 2019+1 more
Timeline
PublishedOct 10
Latest updateMay 13

Description

An Information Disclosure vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory, aka "Microsoft Windows Codecs Library Information Disclosure Vulnerability." This affects Windows 10 Servers, Windows 10, Windows Server 2019.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:NExploitability: 1.8 | Impact: 3.6

Affected Packages5 packages

▶CVEListV5microsoft/windows_10_serversversion 1709 (Server Core Installation), version 1803 (Server Core Installation)+1
▶CVEListV5microsoft/windows_server_2019(Server Core installation)
▶NVDmicrosoft/windows1709, 1803+1
▶CVEListV5microsoft/windows_106 versions+5
▶NVDmicrosoft/windows_101709, 1803, 1809+2

Patches

Patch: portal.msrc.microsoft.com ↗Patch: portal.msrc.microsoft.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-f678-6j26-7575: An Information Disclosure vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory, aka "Microsoft Windows Code↗2022-05-13
▶
CVEList
CVE-2018-8506: An Information Disclosure vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory, aka "Microsoft Windows Code↗2018-10-10
▶

📋Vendor Advisories

1
Microsoft
Microsoft Windows Codecs Library Information Disclosure Vulnerability↗2018-10-09
▶
CVE-2018-8506 — Sensitive Information Exposure | cvebase