60
CVE-2018-8342
—CVSS 3.0
7.8 high
EPSS
1%p66
Published
()
Modified
Description
An elevation of privilege vulnerability exists in the Network Driver Interface Specification (NDIS) when ndis.sys fails to check the length of a buffer prior to copying memory to it, aka "Windows NDIS Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2008 R2. This CVE ID is unique from CVE-2018-8343.
- Vendors
- microsoft
- Products
- windows 7, windows server 2008
- Weakness
- CWE-120
- Vector
- CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H