CVE-2018-8622 — Sensitive Information Exposure in Microsoft Windows 7

5 documents5 sources

Severity

5.5MEDIUMNVD

EPSS

1.2%

top 21.04%

CISA KEV

Not in KEV

Exploit

Exploited in wild

Active exploitation observed

Affected products

Microsoft Windows 7 Microsoft Windows 8.1 Microsoft Windows RT 8.1 +4 more

Timeline

PublishedDec 12

Latest updateMay 13

Description

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2008 R2. This CVE ID is unique from CVE-2018-8477, CVE-2018-8621.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NExploitability: 1.8 | Impact: 3.6

Affected Packages8 packages

▶CVEListV5microsoft/windows_server_20085 versions+4

▶CVEListV5microsoft/windows_server_2012(Server Core installation)

▶CVEListV5microsoft/windows_server_2008_r2Itanium-Based Systems Service Pack 1, x64-based Systems Service Pack 1, x64-based Systems Service Pack 1 (Server Core installation)+2

▶CVEListV5microsoft/windows_server_2012_r2(Server Core installation)

▶NVDmicrosoft/windowsr2

Patches

Patch: portal.msrc.microsoft.com ↗Patch: portal.msrc.microsoft.com ↗

🔴Vulnerability Details

GHSA

GHSA-54j4-wcwj-j2g9: An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosur↗2022-05-13

▶

CVEList

CVE-2018-8622: An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosur↗2018-12-12

▶

VulnCheck

Microsoft Windows Kernel Information Disclosure Vulnerability↗2018

▶

📋Vendor Advisories

Microsoft

Windows Kernel Information Disclosure Vulnerability↗2018-12-11

▶