High severity7.5NVD Advisory· Published Oct 10, 2018· Updated Jun 17, 2026
CVE-2018-8493
CVE-2018-8493
Description
An information disclosure vulnerability exists when the Windows TCP/IP stack improperly handles fragmented IP packets, aka "Windows TCP/IP Information Disclosure Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2016, Windows 8.1, Windows 10, Windows 10 Servers.
Affected products
19cpe:2.3:o:microsoft:windows_10_1507:-:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:microsoft:windows_10_1507:-:*:*:*:*:*:*:*
- (no CPE)range: 32-bit Systems
- cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_10_1703:-:*:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_10_1709:-:*:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_10_1803:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:x64:*+ 3 more
- cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:x64:*
- cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:x86:*
- cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:rt:*:*:*
- (no CPE)range: 32-bit systems
- cpe:2.3:o:microsoft:windows_server_1709:-:*:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_server_1803:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*
- (no CPE)range: (Server Core installation)
cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*
- (no CPE)range: (Server Core installation)
- Range: version 1709 (Server Core Installation)
- Range: Windows RT 8.1
Patches
Vulnerability mechanics
References
3- portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8493nvdPatchVendor Advisory
- www.securityfocus.com/bid/105456nvdThird Party AdvisoryVDB Entry
- www.securitytracker.com/id/1041843nvdThird Party AdvisoryVDB Entry
News mentions
0No linked articles in our index yet.