CVE-2018-8141: Infoleak
An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-8127.
Affected Software
Remediation
Event History
Frequently Asked Questions
Who can exploit this vulnerability?
Exploitation requires local access and low-level privileges. The CVSS vector indicates no user interaction is required, but the attack complexity is high.
What is the security impact if exploitation succeeds?
Successful exploitation can disclose information from Windows kernel memory. The listed impact is high confidentiality impact, with no stated integrity or availability impact.
Are default Windows 10 and Windows Server 2016 installations affected?
The affected products listed are Windows 10 and Windows Server 2016. The provided data does not identify a configuration prerequisite or exclusion.
What should organizations do to remediate the issue?
Apply the available patch for this vulnerability.