CVE-2018-8506

—

CVSS 3.0

5.5 medium

EPSS

4%p91

Published

Oct 10, 2018 (Oct 10, 2018)

Modified

Jun 17, 2026

Description

An Information Disclosure vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory, aka "Microsoft Windows Codecs Library Information Disclosure Vulnerability." This affects Windows 10 Servers, Windows 10, Windows Server 2019.

Vendors: microsoft
Products: windows 10, windows server 2016, windows server 2019
Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (4.4%)

In the news1 stories

Microsoft WindowsCodecs.dll SniffAndConvertToWideString Information Leak Vulnerability

Cisco TalosOct 10, 16:21 UTC · Oct 10, 2018Vulnerability CVE-2018-8506