CVE Tools

CVE-2018-0899

Published: Mar 14, 2018Updated: Nov 21, 2024 Sources: CVE List NVDCWE-200

No Known Exploits

Patch Available

Description

The Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an information disclosure vulnerability due to the way memory addresses are handled, aka "Windows Kernel Information Disclosure Vulnerability". This CVE is unique from CVE-2018-0811, CVE-2018-0813, CVE-2018-0814, CVE-2018-0894, CVE-2018-0895, CVE-2018-0896, CVE-2018-0897, CVE-2018-0898, CVE-2018-0900, CVE-2018-0901 and CVE-2018-0926.

CVSS Vector Breakdown

Exploitability

AV:LAttack Vector

Local

AC:HAttack Complexity

High

PR:LPrivileges Required

Low

UI:NUser Interaction

None

Scope

S:UScope

Unchanged

Impact

C:HConfidentiality

High

I:NIntegrity

None

A:NAvailability

None

Open in CVSS calculator →

Weaknesses

Affected Products

Windows kernel Microsoft Corporation

On-premOS

Operating Systems / windows

windows 10 microsoft

On-premOS

Operating Systems / windows

windows 7 microsoft

On-premOS

Operating Systems / windows

windows 8.1 microsoft

On-premOS

Operating Systems / windows

windows rt 8.1 microsoft

On-premOS

Operating Systems / windows

microsoft corporationcommercialUSOperating Systemsaka microsoft

microsoftcommercialUSOperating Systems

and 4 more affected products View all →

Attack Graph

Products CVE Techniques Tactics

Click technique nodes to view MITRE ATT&CK details. Scroll to zoom, drag to pan.

Exploitability

Official Patch Available

MITRE ATT&CK

1 technique

Collection

View detailed technique mapping

References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0899

portal.msrc.microsoft.com

http://www.securitytracker.com/id/1040517

securitytracker.com

http://www.securityfocus.com/bid/103243

securityfocus.com

Timeline

Published

Mar 14, 2018

Last Updated

Nov 21, 2024

Unlock Complete Vulnerability Intelligence

Get the full picture for CVE-2018-0899 and every CVE in our database. Create a free account — no credit card required.

Create Free Account

Plain-language analysis

Impact assessment and exploitation scenario in plain English

Attack graph visualization

Interactive attack path and kill chain mapping

Exploit details & PoC links

ExploitDB, Metasploit, GitHub PoCs with direct links

Nuclei scanner templates

Ready-to-use vulnerability scanner templates

Full remediation guide

Patch instructions, workarounds, and compliance impact

Interactive AI chat

Ask questions about this vulnerability in natural language

Related vulnerabilities

Semantically similar CVEs and attack patterns

REST API & MCP access

Integrate vulnerability data into your workflows