CVE-2018-0964: Medium severity windows 10 vulnerability

Published Apr 12, 2018

Updated

An information disclosure vulnerability exists when Windows Hyper-V on a host operating system fails to properly validate input from an authenticated user on a guest operating system, aka "Hyper-V Information Disclosure Vulnerability." This affects Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-0957.

Affected Software

3 affected components

Microsoft Windows 10=1703

Microsoft Windows 10=1709

Microsoft Windows Server 2016=1709

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0964

Event History

Apr 12, 2018

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2018-0964?

CVE-2018-0964 has a severity rating of important, indicating potential risk but not critical.

How do I fix CVE-2018-0964?

To fix CVE-2018-0964, apply the latest security updates provided by Microsoft for affected Windows 10 and Windows Server 2016 versions.

Which systems are affected by CVE-2018-0964?

CVE-2018-0964 affects Windows 10 versions 1703 and 1709, as well as Windows Server 2016 version 1709.

What type of vulnerability is CVE-2018-0964?

CVE-2018-0964 is an information disclosure vulnerability related to the Hyper-V feature in Windows.

Can CVE-2018-0964 be exploited remotely?

CVE-2018-0964 cannot be exploited remotely as it requires an authenticated user on a guest operating system.