CVE-2018-8336

Windows Kernel Information Disclosure Vulnerability

CVE-2018-8336 is fixed in 10 products on 1 platform, first by KB4457144, released September 11, 2018. It is not reported as exploited. Patch Radar priority: Routine.

Routine
CVSS
2.5
Important
Exploitation
None reported
N/A
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0278
86th percentile

<p>An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system.</p> <p>To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application. The vulnerability would not allow an attacker to execute code or to elevate user rights directly, but it could be used to obtain information that could be used to try to further compromise the affected system.</p> <p>The update addresses the vulnerability by correcting how the Windows kernel handles objects in memory.</p>

Where it's fixed

ProductFixed inFixReleased
Microsoft
Windows 7 for 32-bit Systems Service Pack 1 KB4457144 Sep 11, 2018
Windows 7 for 32-bit Systems Service Pack 1 KB4457145 Sep 11, 2018
Windows 7 for x64-based Systems Service Pack 1 KB4457144 Sep 11, 2018
Windows 7 for x64-based Systems Service Pack 1 KB4457145 Sep 11, 2018
Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1 KB4457144 Sep 11, 2018
Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1 KB4457145 Sep 11, 2018
Windows Server 2008 R2 for x64-based Systems Service Pack 1 KB4457144 Sep 11, 2018
Windows Server 2008 R2 for x64-based Systems Service Pack 1 KB4457145 Sep 11, 2018
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) KB4457144 Sep 11, 2018
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) KB4457145 Sep 11, 2018
Windows Server 2008 for 32-bit Systems Service Pack 2 KB4457984 Sep 11, 2018
Windows Server 2008 for 32-bit Systems Service Pack 2 KB4458010 Sep 11, 2018
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation) KB4457984 Sep 11, 2018
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation) KB4458010 Sep 11, 2018
Windows Server 2008 for Itanium-Based Systems Service Pack 2 KB4457984 Sep 11, 2018
Windows Server 2008 for Itanium-Based Systems Service Pack 2 KB4458010 Sep 11, 2018
Windows Server 2008 for x64-based Systems Service Pack 2 KB4457984 Sep 11, 2018
Windows Server 2008 for x64-based Systems Service Pack 2 KB4458010 Sep 11, 2018
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) KB4457984 Sep 11, 2018
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) KB4458010 Sep 11, 2018