CVE-2018-0964

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

An information disclosure vulnerability exists when Windows Hyper-V on a host operating system fails to properly validate input from an authenticated user on a guest operating system, aka "Hyper-V Information Disclosure Vulnerability." This affects Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-0957.

Metrics

CVSS 3.0 6.1/10CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:L/A:N

Affected software

VendorProductVersions
MicrosoftWindows 10Version 1703 for x64-based Systems; Version 1709 for x64-based Systems
MicrosoftWindows 10 Serversversion 1709 (Server Core Installation)

References

Timeline

Published
Apr 12, 2018
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2018

CVE-2018-09658.4A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated usCVE-2018-09663.3A security feature bypass exists when Device Guard incorrectly validates an untrusted file, aka "Device Guard Security Feature Bypass VulnerCVE-2018-09675.3A denial of service vulnerability exists in the way that Windows SNMP Service handles malformed SNMP traps, aka "Windows SNMP Service DenialCVE-2018-09685.5An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead toCVE-2018-09695.5An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead toCVE-2018-09705.5An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead toCVE-2018-09715.5An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead toCVE-2018-09725.5An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead toCVE-2018-09735.5An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead toCVE-2018-09745.5An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead toCVE-2018-09755.5An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead toCVE-2018-09765.3A denial of service vulnerability exists in Remote Desktop Protocol (RDP) when an attacker connects to the target system using RDP and sends
CVE-2018-0964: Medium severity, CVSS 6.1 | Vulnix