⚠ Exploited in the wild
Exploitation observed in the wild. Not yet on CISA KEV.

CVE-2018-8621 — Sensitive Information Exposure in Microsoft Windows 7

5 documents5 sources
Severity
5.5MEDIUMNVD
EPSS
0.7%
top 28.98%
CISA KEV
Not in KEV
Exploit
Exploited in wild
Active exploitation observed
Affected products
4
Microsoft Windows 7Microsoft Windows Server 2008 R2Microsoft Windows Server 2012+1 more
Timeline
PublishedDec 12
Latest updateMay 13

Description

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows Server 2012, Windows 7, Windows Server 2008 R2. This CVE ID is unique from CVE-2018-8477, CVE-2018-8622.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NExploitability: 1.8 | Impact: 3.6

Affected Packages4 packages

▶CVEListV5microsoft/windows_server_2012(Server Core installation)
▶CVEListV5microsoft/windows_server_2008_r2Itanium-Based Systems Service Pack 1, x64-based Systems Service Pack 1, x64-based Systems Service Pack 1 (Server Core installation)+2
▶CVEListV5microsoft/windows_732-bit Systems Service Pack 1, x64-based Systems Service Pack 1+1

Patches

Patch: portal.msrc.microsoft.com ↗Patch: portal.msrc.microsoft.com ↗

🔴Vulnerability Details

3
GHSA
GHSA-4v5x-6vf6-8x7f: An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosur↗2022-05-13
▶
CVEList
CVE-2018-8621: An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosur↗2018-12-12
▶
VulnCheck
Microsoft Windows Kernel Information Disclosure Vulnerability↗2018
▶

📋Vendor Advisories

1
Microsoft
Windows Kernel Information Disclosure Vulnerability↗2018-12-11
▶
CVE-2018-8621 — Sensitive Information Exposure | cvebase