Medium severity5.5NVD Advisory· Published Dec 12, 2018· Updated Jun 17, 2026

CVE-2018-8638

Description

An information disclosure vulnerability exists when DirectX improperly handles objects in memory, aka "DirectX Information Disclosure Vulnerability." This affects Windows 10, Windows Server 2019.

Affected products

Microsoft/Directxllm-fuzzy
Microsoft/Windows 10 1909cpe-rescue2 versions
Version 1809 for 32-bit Systems+ 1 more
- (no CPE)range: Version 1809 for 32-bit Systems
- cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*
Microsoft/Windows Server 2019cpe-rescue2 versions
(Server Core installation)+ 1 more
- (no CPE)range: (Server Core installation)
- cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8638nvdPatchVendor Advisory
www.securityfocus.com/bid/106089nvdThird Party AdvisoryVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.358
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000