Lucene search

[email protected]CVE-2018-0843

HistoryFeb 15, 2018 - 2:29 a.m.

CVE-2018-0843

2018-02-1502:29:02

CWE-200

[email protected]

web.nvd.nist.gov

cve-2018-0843

windows

kernel

windows 10

version 1709

windows server

information disclosure

vulnerability

nvd

1.9 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:M/Au:N/C:P/I:N/A:N

4.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

4.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

43.9%

JSON

The Windows kernel in Windows 10 version 1709 and Windows Server, version 1709 allows an information disclosure vulnerability due to how objects in memory are handled, aka “Windows Kernel Information Disclosure Vulnerability”. This CVE is unique from CVE-2018-0742, CVE-2018-0756, CVE-2018-0809 and CVE-2018-0820.

Affected configurations

Vulners

NVD

Node

microsoft_corporationwindows

CPENameOperatorVersion
microsoft:windows_10microsoft windows 10eq1709
microsoft:windows_server_2016microsoft windows server 2016eq1709

CPE	Name	Operator	Version
microsoft:windows_10	microsoft windows 10	eq	1709
microsoft:windows_server_2016	microsoft windows server 2016	eq	1709

CNA Affected

[
  {
    "product": "Windows",
    "vendor": "Microsoft Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "Windows 10 version 1709 and Windows Server, version 1709"
      }
    ]
  }
]