CVE-2018-0833

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

The Microsoft Server Message Block 2.0 and 3.0 (SMBv2/SMBv3) client in Windows 8.1 and RT 8.1 and Windows Server 2012 R2 allows a denial of service vulnerability due to how specially crafted requests are handled, aka "SMBv2/SMBv3 Null Dereference Denial of Service Vulnerability".

Metrics

CVSS 3.0 5.3/10CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-476

Affected software

Vendor	Product	Versions
Microsoft Corporation	Server Message Block	Windows 8.1 and RT 8.1 and Windows Server 2012 R2

References

http://www.securityfocus.com/bid/102924Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1040375Third Party Advisory, VDB Entry
https://github.com/KINGSABRI/CVE-in-Ruby/tree/master/CVE-2018-0833Exploit, Third Party Advisory
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0833Patch, Vendor Advisory
https://www.exploit-db.com/exploits/44189/Exploit, Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/102924Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1040375Third Party Advisory, VDB Entry
https://github.com/KINGSABRI/CVE-in-Ruby/tree/master/CVE-2018-0833Exploit, Third Party Advisory
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0833Patch, Vendor Advisory
https://www.exploit-db.com/exploits/44189/Exploit, Third Party Advisory, VDB Entry

Timeline

Published: Feb 15, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-08347.5Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, du CVE-2018-08357.5Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, du CVE-2018-08367.5Microsoft Edge and ChakraCore in Microsoft Windows 10 1703 and 1709 allows remote code execution, due to how the scripting engine handles ob CVE-2018-08377.5Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, du CVE-2018-08387.5Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, du CVE-2018-08394.3Microsoft Edge in Microsoft Windows 10 1703 allows information disclosure, due to how Edge handles objects in memory, aka "Microsoft Edge In CVE-2018-08407.5Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and In CVE-2018-08418.8Microsoft Office 2016 Click-to-Run allows a remote code execution vulnerability due to how objects are handled in memory, aka "Office Remote CVE-2018-08427.0Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and CVE-2018-08434.7The Windows kernel in Windows 10 version 1709 and Windows Server, version 1709 allows an information disclosure vulnerability due to how obj CVE-2018-08447.8The Windows Common Log File System (CLFS) driver in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Serve CVE-2018-08457.8Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 all