CVE-2018-0957

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

An information disclosure vulnerability exists when Windows Hyper-V on a host operating system fails to properly validate input from an authenticated user on a guest operating system, aka "Hyper-V Information Disclosure Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2016, Windows 8.1, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-0964.

Metrics

CVSS 3.0 5.3/10CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N

Weakness enumeration

CWE-20

Affected software

No affected versions have been published.

Timeline

Published
Apr 12, 2018
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2018

CVE-2018-09585.3A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard, aka "Windows Security FeaturCVE-2018-09597.6A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated usCVE-2018-09605.5An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel InformationCVE-2018-09617.6A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate vSMB packet data, aka "Hyper-VCVE-2018-09637.8An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka "Windows Kernel Elevation oCVE-2018-09646.1An information disclosure vulnerability exists when Windows Hyper-V on a host operating system fails to properly validate input from an authCVE-2018-09658.4A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated usCVE-2018-09663.3A security feature bypass exists when Device Guard incorrectly validates an untrusted file, aka "Device Guard Security Feature Bypass VulnerCVE-2018-09675.3A denial of service vulnerability exists in the way that Windows SNMP Service handles malformed SNMP traps, aka "Windows SNMP Service DenialCVE-2018-09685.5An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead toCVE-2018-09695.5An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead toCVE-2018-09705.5An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to