VYPR
← All advisories
Medium severity5.5NVD Advisory· Published Dec 12, 2018· Updated Jun 17, 2026

CVE-2018-8637

CVE-2018-8637

Description

An information disclosure vulnerability exists in Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Address Space Layout Randomization (KASLR) bypass, aka "Win32k Information Disclosure Vulnerability." This affects Windows 10 Servers, Windows 10, Windows Server 2019.

Affected products

8
  • Microsoft/Windows 10 19093 versions
    cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*
    • (no CPE)range: Version 1803 for 32-bit Systems
  • Microsoft/Windows Server 2016
    cpe:2.3:o:microsoft:windows_server_2016:1803:*:*:*:*:*:*:*
  • Microsoft/Windows Server 20192 versions
    cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*
    • (no CPE)range: (Server Core installation)
  • Microsoft/Windowsllm-fuzzy
  • Microsoft/Windows Server 2003cpe-rescue
    Range: version 1803 (Server Core Installation)

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.