CVE-2018-8061

HighCVSS 7.1/10Last modified Jun 17, 2026

Description

HWiNFO AMD64 Kernel driver version 8.98 and lower allows an unprivileged user to send IOCTL 0x85FE2608 to the device driver with the HWiNFO32 symbolic device name, resulting in direct physical memory read or write.

Metrics

CVSS 3.0 7.1/10CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Weakness enumeration

CWE-119

Affected software

No affected versions have been published.

Timeline

Published
May 10, 2018
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2018

CVE-2018-80625.4A cross-site scripting (XSS) vulnerability on Comtrend AR-5387un devices with A731-410JAZ-C04_R02.A2pD035g.d23i firmware allows remote attacCVE-2018-80657.5An issue was discovered in the web server in Flexense SyncBreeze Enterprise 10.6.24. There is a user mode write access violation on the syncCVE-2018-80695.4QCMS version 3.0 has XSS via the webname parameter to the /backend/system.html URI.CVE-2018-80705.4QCMS version 3.0 has XSS via the title parameter to the /guest/index.html URI.CVE-2018-80716.1Mautic before v2.13.0 has stored XSS via a theme config file.CVE-2018-80728.8An issue was discovered on EDIMAX IC-3140W through 3.06, IC-5150W through 3.09, and IC-6220DC through 3.06 devices. The ipcam_cgi binary conCVE-2018-80739.8Yii 2.x before 2.0.15 allows remote attackers to execute arbitrary LUA code via a variant of the CVE-2018-7269 attack in conjunction with thCVE-2018-80748.1Yii 2.x before 2.0.15 allows remote attackers to inject unintended search conditions via a variant of the CVE-2018-7269 attack in conjunctioCVE-2018-80767.5ZenMate 1.5.4 for macOS suffers from a type confusion vulnerability within the com.zenmate.chron-xpc LaunchDaemon component. The LaunchDaemoCVE-2018-80785.4YzmCMS 3.7 has Stored XSS via the title parameter to advertisement/adver/edit.html.CVE-2018-80875.5Memory leak in the hwsim_new_radio_nl function in drivers/net/wireless/mac80211_hwsim.c in the Linux kernel through 4.15.9 allows local userCVE-2018-80889.8org.slf4j.ext.EventData in the slf4j-ext module in QOS.CH SLF4J before 1.8.0-beta2 allows remote attackers to bypass intended access restric
CVE-2018-8061: High severity, CVSS 7.1 | Vulnix