CVE-2018-8419
Summary
| CVE | CVE-2018-8419 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2018-09-13 00:29:00 UTC |
| Updated | 2020-08-24 17:37:00 UTC |
| Description | An information disclosure vulnerability exists when the Windows kernel fails to properly initialize a memory address, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-8336, CVE-2018-8442, CVE-2018-8443, CVE-2018-8445, CVE-2018-8446. |
Risk And Classification
Problem Types: CWE-665
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Microsoft | Windows 10 | - | All | All | All |
| Operating System | Microsoft | Windows 10 | 1607 | All | All | All |
| Operating System | Microsoft | Windows 10 | 1703 | All | All | All |
| Operating System | Microsoft | Windows 10 | 1803 | All | All | All |
| Operating System | Microsoft | Windows 10 | - | All | All | All |
| Operating System | Microsoft | Windows 10 | 1607 | All | All | All |
| Operating System | Microsoft | Windows 10 | 1703 | All | All | All |
| Operating System | Microsoft | Windows 10 | 1803 | All | All | All |
| Operating System | Microsoft | Windows 7 | - | sp1 | All | All |
| Operating System | Microsoft | Windows 7 | - | sp1 | All | All |
| Operating System | Microsoft | Windows 8.1 | - | All | All | All |
| Operating System | Microsoft | Windows 8.1 | - | All | All | All |
| Operating System | Microsoft | Windows Rt 8.1 | - | All | All | All |
| Operating System | Microsoft | Windows Rt 8.1 | - | All | All | All |
| Operating System | Microsoft | Windows Server | 2008 | r2 | sp1 | All |
| Operating System | Microsoft | Windows Server | 2008 | sp2 | All | All |
| Operating System | Microsoft | Windows Server | 2008 | sp2 | All | All |
| Operating System | Microsoft | Windows Server | 2012 | All | All | All |
| Operating System | Microsoft | Windows Server | 2012 | r2 | All | All |
| Operating System | Microsoft | Windows Server | 2016 | All | All | All |
| Operating System | Microsoft | Windows Server | 2016 | 1709 | All | All |
| Operating System | Microsoft | Windows Server | 2016 | 1803 | All | All |
| Operating System | Microsoft | Windows Server | 2008 | r2 | sp1 | All |
| Operating System | Microsoft | Windows Server | 2008 | sp2 | All | All |
| Operating System | Microsoft | Windows Server | 2008 | sp2 | All | All |
| Operating System | Microsoft | Windows Server | 2012 | All | All | All |
| Operating System | Microsoft | Windows Server | 2012 | r2 | All | All |
| Operating System | Microsoft | Windows Server | 2016 | All | All | All |
| Operating System | Microsoft | Windows Server | 2016 | 1709 | All | All |
| Operating System | Microsoft | Windows Server | 2016 | 1803 | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8419 | CONFIRM | portal.msrc.microsoft.com | Patch, Vendor Advisory |
| Microsoft Windows Kernel CVE-2018-8419 Local Information Disclosure Vulnerability | BID | www.securityfocus.com | Third Party Advisory, VDB Entry |
| Windows Kernel Multiple Flaws Let Local Users Deny Service, Obtain Potentially Sensitive Information, and Gain Elevated Privileges - SecurityTracker | SECTRACK | www.securitytracker.com | Third Party Advisory, VDB Entry |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.