CVEvulnerability
CVE-2018-8454
5.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2018-11-14
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 5.5 MEDIUM — CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-200
Description
An information disclosure vulnerability exists when Windows Audio Service fails to properly handle objects in memory, aka "Windows Audio Service Information Disclosure Vulnerability." This affects Windows 10 Servers, Windows 10, Windows Server 2019.
Affected configurations
• microsoft windows 10 1709
• microsoft windows 10 1803
• microsoft windows 10 1809
• microsoft windows server 2016 1709
• microsoft windows server 2016 1803
• microsoft windows server 2019
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- http://www.securityfocus.com/bid/105799 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1042122 Third Party Advisory, VDB Entry
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8454 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/105799 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1042122 Third Party Advisory, VDB Entry
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8454 Patch, Vendor Advisory