CVE-2018-0957: Input Validation

Published Apr 12, 2018

Updated

An information disclosure vulnerability exists when Windows Hyper-V on a host operating system fails to properly validate input from an authenticated user on a guest operating system, aka "Hyper-V Information Disclosure Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2016, Windows 8.1, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-0964.

Affected Software

10 affected components

Microsoft Windows 10

Microsoft Windows 10=1511

Microsoft Windows 10=1607

Microsoft Windows 10=1703

Microsoft Windows 10=1709

Microsoft Windows 8.1

Microsoft Windows RT 8.1

Microsoft Windows Server 2012=r2

Microsoft Windows Server 2016

Microsoft Windows Server 2016=1709

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0957

Event History

Apr 12, 2018

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2018-0957?

CVE-2018-0957 has a severity rating of important, indicating a significant potential risk.

How do I fix CVE-2018-0957?

To fix CVE-2018-0957, apply the latest security updates provided by Microsoft for your affected version of Windows.

Which versions of Windows are affected by CVE-2018-0957?

CVE-2018-0957 affects various versions including Windows 10, Windows 8.1, Windows RT, and Windows Server 2012 R2.

What type of vulnerability is CVE-2018-0957?

CVE-2018-0957 is classified as an information disclosure vulnerability in Windows Hyper-V.

How does CVE-2018-0957 impact Windows Hyper-V?

CVE-2018-0957 allows an authenticated user on a guest operating system to potentially disclose information from the host operating system.