CVE-2018-8626: Critical severity windows 10 vulnerability

Published Dec 12, 2018

Updated

A remote code execution vulnerability exists in Windows Domain Name System (DNS) servers when they fail to properly handle requests, aka "Windows DNS Server Heap Overflow Vulnerability." This affects Windows Server 2012 R2, Windows Server 2019, Windows Server 2016, Windows 10, Windows 10 Servers.

Affected Software

9 affected components

Microsoft Windows 10=1607

Microsoft Windows 10=1709

Microsoft Windows 10=1803

Microsoft Windows 10=1809

Microsoft Windows Server 2012=r2

Microsoft Windows Server 2016

Microsoft Windows Server 2016=1709

Microsoft Windows Server 2016=1803

Microsoft Windows Server 2019

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8626

Event History

Dec 12, 2018

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2018-8626?

CVE-2018-8626 is classified as a critical remote code execution vulnerability affecting multiple Windows platforms.

How do I fix CVE-2018-8626?

To mitigate CVE-2018-8626, ensure that you apply the latest security updates provided by Microsoft for your affected Windows version.

Which versions of Windows are affected by CVE-2018-8626?

CVE-2018-8626 impacts Windows Server 2012 R2, Windows Server 2016, Windows Server 2019, and multiple versions of Windows 10.

What are the potential impacts of CVE-2018-8626?

Exploitation of CVE-2018-8626 can allow an attacker to execute arbitrary code on a vulnerable DNS server.

Is there a workaround for CVE-2018-8626?

While updating your systems is the best approach, disabling unnecessary services can serve as a temporary workaround against CVE-2018-8626.