CVE-2018-8422: Infoleak

Published Sep 13, 2018

Updated

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka "Windows GDI Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2008 R2. This CVE ID is unique from CVE-2018-8424.

Affected Software

3 affected components

Microsoft Windows 7=sp1

Microsoft Windows Server=2008-r2

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8422

Event History

Sep 13, 2018

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2018-8422?

CVE-2018-8422 has a severity rating of important, indicating potential significant impact on the affected systems.

How do I fix CVE-2018-8422?

To fix CVE-2018-8422, apply the latest security updates provided by Microsoft for Windows 7 and Windows Server 2008 R2.

Which systems are affected by CVE-2018-8422?

CVE-2018-8422 affects Windows 7 SP1 and Windows Server 2008 R2 SP1 on both Itanium and x64 platforms.

What type of vulnerability is CVE-2018-8422?

CVE-2018-8422 is classified as an information disclosure vulnerability involving the improper disclosure of memory contents.

Can CVE-2018-8422 lead to further attacks?

Yes, information disclosed through CVE-2018-8422 could potentially be leveraged by attackers to execute further attacks.