CVE-2018-8621

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows Server 2012, Windows 7, Windows Server 2008 R2. This CVE ID is unique from CVE-2018-8477, CVE-2018-8622.

Metrics

CVSS 3.0 5.5/10CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Affected software

VendorProductVersions
MicrosoftWindows Server 2012(Server Core installation)
MicrosoftWindows 732-bit Systems Service Pack 1; x64-based Systems Service Pack 1
MicrosoftWindows Server 2008 R2Itanium-Based Systems Service Pack 1; x64-based Systems Service Pack 1; x64-based Systems Service Pack 1 (Server Core installation)

References

Timeline

Published
Dec 12, 2018
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2018

CVE-2018-86225.5An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel InformationCVE-2018-86247.5A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "CCVE-2018-86257.5A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine RemCVE-2018-86269.8A remote code execution vulnerability exists in Windows Domain Name System (DNS) servers when they fail to properly handle requests, aka "WiCVE-2018-86275.5An information disclosure vulnerability exists when Microsoft Excel software reads out of bound memory due to an uninitialized variable, whiCVE-2018-86287.8A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly handle objects in memory, CVE-2018-86297.5A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "CCVE-2018-86317.5A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory CorCVE-2018-86348.8A remote code execution vulnerability exists in Windows where Microsoft text-to-speech fails to properly handle objects in the memory, aka "CVE-2018-86358.8An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted authenticatioCVE-2018-86367.8A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "CVE-2018-86375.5An information disclosure vulnerability exists in Windows kernel that could allow an attacker to retrieve information that could lead to a K
CVE-2018-8621: Medium severity, CVSS 5.5 | Vulnix