PT-2018-2028
CVE-2018-8637
·
Publicado
2018-12-11
·
Atualizado
2020-08-24
Descrição por
CVSS 3.1
5.5
MédiaMétricasAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Windows 10 versions prior to the fixed version
Windows Server 2019 versions prior to the fixed version
Windows 10 Servers versions prior to the fixed version
Description
The issue is related to insecure privilege management in the Windows kernel, allowing an attacker to disclose protected information using a specially crafted application. This could potentially lead to a Kernel Address Space Layout Randomization (KASLR) bypass.
Recommendations
For Windows 10, update to a version that includes the fix for this issue.
For Windows Server 2019, apply the necessary patch or update to a version that includes the fix for this issue.
For Windows 10 Servers, update to a version that includes the fix for this issue.
As a temporary workaround, consider restricting access to sensitive system information until a patch is available.
Explorabilidade
Correção
Impactos
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾