CVE-2018-8141

—

CVSS 3.0

4.7 medium

EPSS

3%p85

Published

May 9, 2018 (May 9, 2018)

Modified

Jun 17, 2026

Description

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-8127.

Vendors: microsoft
Products: windows 10, windows server 2016
Weakness: CWE-200
Vector: CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (2.6%)

In the news3 stories

May 2018 Patch Tuesday: Microsoft fixes 2 zero-day flaws reportedly exploited by APT group

Security AffairsMay 9, 08:09 UTC · May 9, 2018Exploit / PoC in the wildCVE-2018-8174 CVE-2018-8120 CVE-2018-8170+1 CVEs

Microsoft Patches Two Zero

The Hacker NewsMay 9, 06:14 UTC · May 9, 2018Vulnerability in the wildCVE-2018-8174 CVE-2018-8120 CVE-2018-8141+1 CVEs

Microsoft Patch Tuesday

Cisco TalosMay 8, 19:02 UTC · May 8, 2018Vulnerability CVE-2018-4944 CVE-2018-8174 CVE-2018-0959+61 CVEs1