Important CVSS 4.7 EPSS 0.01835 2018-12 archive

Executive Summary

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system. An authenticated attacker could exploit this vulnerability by running a specially crafted application. The update addresses the vulnerability by correcting how the Windows kernel handles objects in memory.

Overview

4.7
CVSS MEDIUM
Important
MS Severity
Not Exploited
MS Exploit Status
N/A
MS Exploit Likelihood
Category Information Disclosure
Released Dec 11 2018
Last Updated Dec 11 2018
Publicly Disclosed No
CISA KEV Not Listed
Known Exploits None Known
EPSS Score 0.01835 — 0.77021 percentile

CVSS Vector

ATTACK VECTOR
Local
ATTACK COMPLEXITY
High
PRIVILEGES REQUIRED
Low
USER INTERACTION
None
SCOPE
Unchanged
CONFIDENTIALITY
High
INTEGRITY
None
AVAILABILITY
None
EXPLOIT CODE MATURITY
Unproven
REMEDIATION LEVEL
Official Fix
REPORT CONFIDENCE
Confirmed
Temporal Score: 4.1

EPSS Score

0.01835
probability of exploitation in the next 30 days
0.77021 percentile - updated 2026-08-14
View on FIRST.org

Known Exploits

Acknowledgments