First published: Thu Sep 13 2018(Updated: )
An information disclosure vulnerability exists when Windows Hyper-V on a host operating system fails to properly validate input from an authenticated user on a guest operating system, aka "Windows Hyper-V Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.
Credit: secure@microsoft.com
Affected Software | Affected Version | How to fix |
---|---|---|
Microsoft Windows 10 | ||
Microsoft Windows 10 | =1607 | |
Microsoft Windows 10 | =1703 | |
Microsoft Windows 10 | =1709 | |
Microsoft Windows 10 | =1803 | |
Microsoft Windows 7 | =sp1 | |
Microsoft Windows 8.1 | ||
Microsoft Windows 8.1 | ||
Microsoft Windows Server 2008 Itanium | =sp2 | |
Microsoft Windows Server 2012 x64 | ||
Microsoft Windows Server 2012 x64 | =r2 | |
Microsoft Windows Server 2016 | ||
Microsoft Windows Server 2016 | =1709 | |
Microsoft Windows Server 2016 | =1803 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2018-8434 has a severity rating of important, indicating a significant information disclosure risk.
To mitigate CVE-2018-8434, ensure you apply the latest security updates provided by Microsoft for affected Windows versions.
CVE-2018-8434 affects multiple Windows versions including Windows 7, Windows 8.1, Windows 10, and various Windows Server editions.
CVE-2018-8434 is classified as an information disclosure vulnerability in the Hyper-V virtualization platform.
CVE-2018-8434 requires local authenticated access to exploit, limiting remote attack vectors.