CVE-2018-0960

EUVD-2018-1739

12.04.2018, 01:29

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-0887, CVE-2018-0968, CVE-2018-0969, CVE-2018-0970, CVE-2018-0971, CVE-2018-0972, CVE-2018-0973, CVE-2018-0974, CVE-2018-0975.

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	5.5 MEDIUM	LOCAL	LOW	LOW	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Base Score

CVSS 3.x

EPSS Score

Percentile: 77%

Affected Products (NVD)

Vendor	Product	Version
microsoft	windows_10	*
microsoft	windows_7	-
microsoft	windows_8.1	*
microsoft	windows_rt_8.1	-
microsoft	windows_server_2008	-
microsoft	windows_server_2012	-
microsoft	windows_server_2016	*

𝑥

= Vulnerable software versions

Windows Releases

Platform

Version

Windows 10

(x64, x86)	KB4093111
1511 (x64, x86)	KB4093109
1703 (x64, x86)	KB4093107
1709 (x64, x86)	KB4093112

Windows 7

Service Pack 1 (x64, x86)

KB4093118

Windows 8.1

(x64, x86)	KB4093114
(x64, x86)	KB4093115

Windows RT 8.1

All

KB4093114

Windows Server

1709 Server Core

KB4093112

Windows Server 2008

Service Pack 2 (x64, x86)	KB4093478
Service Pack 2 Server Core (x64, x86)	KB4093478

Windows Server 2008 R2

Service Pack 1 (x64)	KB4093118
Service Pack 1 Server Core (x64)	KB4093118

Windows Server 2012

Server Core	KB4093123
Standard	KB4093123

Windows Server 2012 R2

Server Core	KB4093114
Server Core	KB4093115
Standard	KB4093114
Standard	KB4093115

Windows Server 2016

Server Core	KB4093119
Standard	KB4093119

References

http://www.securityfocus.com/bid/103663

http://www.securitytracker.com/id/1040657

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0960

http://www.securityfocus.com/bid/103663

http://www.securitytracker.com/id/1040657

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0960