CVE-2018-8396: Infoleak

Published Aug 15, 2018

Updated

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka "Windows GDI Information Disclosure Vulnerability." This affects Windows Server 2008, Windows 7, Windows Server 2008 R2. This CVE ID is unique from CVE-2018-8394, CVE-2018-8398.

Affected Software

5 affected components

Microsoft Windows 7=sp1

Microsoft Windows Server 2008=sp2

Microsoft Windows Server 2008 Itanium=sp2

Microsoft Windows Server 2008=r2-sp1

Microsoft Windows Server 2008 Itanium=r2-sp1

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8396

Event History

Aug 15, 2018

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2018-8396?

CVE-2018-8396 has a severity rating of important, indicating potential risk to vulnerable systems.

How do I fix CVE-2018-8396?

To fix CVE-2018-8396, apply the security update provided by Microsoft for vulnerable versions of Windows.

What systems are affected by CVE-2018-8396?

CVE-2018-8396 affects Windows 7, Windows Server 2008, and Windows Server 2008 R2.

What is the nature of the CVE-2018-8396 vulnerability?

CVE-2018-8396 is an information disclosure vulnerability that allows unauthorized access to the contents of memory.

Can CVE-2018-8396 be exploited remotely?

CVE-2018-8396 can be exploited by local users with certain conditions, rather than remotely.