Microsoft Windows Server 2008 R2
121 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2019-0584 | | A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database En | HIGH 7.8 | 14 % | ||
| CVE-2019-0583 | | A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database En | HIGH 7.8 | 16 % | ||
| CVE-2019-0582 | | A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database En | HIGH 7.8 | 12 % | ||
| CVE-2019-0581 | | A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database En | HIGH 7.8 | 14 % | ||
| CVE-2019-0580 | | A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database En | HIGH 7.8 | 17 % | ||
| CVE-2019-0579 | | A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database En | HIGH 7.8 | 17 % | ||
| CVE-2019-0577 | | A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database En | HIGH 7.8 | 17 % | ||
| CVE-2019-0576 | | A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database En | HIGH 7.8 | 17 % | ||
| CVE-2019-0575 | | A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database En | HIGH 7.8 | 14 % | ||
| CVE-2019-0569 | | An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information | MEDIUM 5.5 | 1.8 % | ||
| CVE-2019-0554 | | An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information | MEDIUM 5.5 | 1.8 % | ||
| CVE-2019-0549 | | An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information | MEDIUM 5.5 | 1.8 % | ||
| CVE-2019-0536 | | An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information | MEDIUM 5.5 | 1.8 % | ||
| CVE-2018-8641 | | An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, ak | HIGH 7.8 | 1.1 % | ||
| CVE-2018-8639 | | An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k | HIGH 8.4 | 22 % | KEV | |
| CVE-2018-8622 | | An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information | MEDIUM 5.5 | 1.8 % | ||
| CVE-2018-8621 | Itanium-Based Systems Service Pack 1 ; x64-based Systems Service Pack 1 ; x64-based Systems Service Pack 1 (Server Core installation) | An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information | MEDIUM 5.5 | 1.8 % | ||
| CVE-2018-8611 | | An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka "Windows Kernel Eleva | HIGH 7.8 | 4.2 % | KEV | |
| CVE-2018-8596 | | An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka "Windows | MEDIUM 6.5 | 7.1 % | ||
| CVE-2018-8595 | | An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka "Windows | MEDIUM 6.5 | 6.9 % | ||
| CVE-2018-8514 | | An information disclosure vulnerability exists when Remote Procedure Call runtime improperly initializes objects in memory, aka "Remote Proc | MEDIUM 5.5 | 1.9 % | ||
| CVE-2018-8477 | | An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information | MEDIUM 5.5 | 1.8 % | ||
| CVE-2018-8589 | Itanium-Based Systems Service Pack 1 ; x64-based Systems Service Pack 1 ; x64-based Systems Service Pack 1 (Server Core installation) | An elevation of privilege vulnerability exists when Windows improperly handles calls to Win32k.sys, aka "Windows Win32k Elevation of Privile | HIGH 7.8 | 3.0 % | KEV | |
| CVE-2018-8565 | | An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka "Win32k Information Dis | MEDIUM 5.5 | 3.2 % | ||
| CVE-2018-8563 | | An information disclosure vulnerability exists when DirectX improperly handles objects in memory, aka "DirectX Information Disclosure Vulner | MEDIUM 5.5 | 1.7 % | ||
| CVE-2018-8562 | | An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k | HIGH 7.8 | 1.3 % | ||
| CVE-2018-8553 | | A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka "Microsoft Graphics | HIGH 7.8 | 19 % | ||
| CVE-2018-8544 | | A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Rem | HIGH 8.8 | 48 % | ||
| CVE-2018-8476 | | A remote code execution vulnerability exists in the way that Windows Deployment Services TFTP Server handles objects in memory, aka "Windows | CRITICAL 9.8 | 65 % | ||
| CVE-2018-8450 | | A remote code execution vulnerability exists when Windows Search handles objects in memory, aka "Windows Search Remote Code Execution Vulner | HIGH 8.8 | 16 % | ||
| CVE-2018-8415 | | A tampering vulnerability exists in PowerShell that could allow an attacker to execute unlogged code, aka "Microsoft PowerShell Tampering Vu | HIGH 7.8 | 1.2 % | ||
| CVE-2018-8408 | | An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory, aka "Windows Kernel Informa | MEDIUM 5.5 | 1.7 % | ||
| CVE-2018-8407 | | An information disclosure vulnerability exists when "Kernel Remote Procedure Call Provider" driver improperly initializes objects in memory, | MEDIUM 5.5 | 1.7 % | ||
| CVE-2018-8256 | | A remote code execution vulnerability exists when PowerShell improperly handles specially crafted files, aka "Microsoft PowerShell Remote Co | HIGH 8.8 | 23 % | ||
| CVE-2018-8494 | | A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka "MS XML Remote Code | HIGH 8.8 | 22 % | ||
| CVE-2018-8489 | | A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated us | HIGH 8.4 | 4.4 % | ||
| CVE-2018-8486 | | An information disclosure vulnerability exists when DirectX improperly handles objects in memory, aka "DirectX Information Disclosure Vulner | MEDIUM 5.5 | 1.7 % | ||
| CVE-2018-8482 | | An information disclosure vulnerability exists when Windows Media Player improperly discloses file information, aka "Windows Media Player In | LOW 3.1 | 5.0 % | ||
| CVE-2018-8481 | | An information disclosure vulnerability exists when Windows Media Player improperly discloses file information, aka "Windows Media Player In | LOW 3.1 | 5.0 % | ||
| CVE-2018-8472 | | An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory, allowi | MEDIUM 5.5 | 19 % | ||
| CVE-2018-8453 | | An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k | HIGH 7.8 | 70 % | KEV | |
| CVE-2018-8432 | | A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka "Microsoft Graphics | HIGH 7.8 | 20 % | ||
| CVE-2018-8423 | | A remote code execution vulnerability exists in the Microsoft JET Database Engine, aka "Microsoft JET Database Engine Remote Code Execution | HIGH 7.8 | 32 % | ||
| CVE-2018-8413 | | A remote code execution vulnerability exists when "Windows Theme API" does not properly decompress files, aka "Windows Theme API Remote Code | HIGH 7.8 | 46 % | ||
| CVE-2018-8411 | | An elevation of privilege vulnerability exists when NTFS improperly checks access, aka "NTFS Elevation of Privilege Vulnerability." This aff | HIGH 7.8 | 3.1 % | ||
| CVE-2018-8333 | | An Elevation of Privilege vulnerability exists in Filter Manager when it improperly handles objects in memory, aka "Microsoft Filter Manager | HIGH 7.0 | 1.9 % | ||
| CVE-2018-8330 | | An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information | MEDIUM 5.5 | 2.5 % | ||
| CVE-2018-8320 | | A security feature bypass vulnerability exists in DNS Global Blocklist feature, aka "Windows DNS Security Feature Bypass Vulnerability." Thi | MEDIUM 4.3 | 4.7 % | ||
| CVE-2018-8475 | | A remote code execution vulnerability exists when Windows does not properly handle specially crafted image files, aka "Windows Remote Code E | HIGH 8.8 | 16 % | ||
| CVE-2018-8468 | | An elevation of privilege vulnerability exists when Windows, allowing a sandbox escape, aka "Windows Elevation of Privilege Vulnerability." | MEDIUM 4.7 | 12 % | ||
| CVE-2018-8446 | | An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information | MEDIUM 5.5 | 2.8 % | ||
| CVE-2018-8443 | | An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information | MEDIUM 5.5 | 2.8 % | ||
| CVE-2018-8442 | | An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information | MEDIUM 5.5 | 2.8 % | ||
| CVE-2018-8440 | | An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC), aka "Windows A | HIGH 7.8 | 19 % | KEV | |
| CVE-2018-8434 | | An information disclosure vulnerability exists when Windows Hyper-V on a host operating system fails to properly validate input from an auth | MEDIUM 5.4 | 3.5 % | ||
| CVE-2018-8433 | | An information disclosure vulnerability exists when the Windows Graphics component improperly handles objects in memory, aka "Microsoft Grap | MEDIUM 4.7 | 2.6 % | ||
| CVE-2018-8424 | | An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka "Windows | MEDIUM 6.5 | 13 % | ||
| CVE-2018-8422 | Itanium-Based Systems Service Pack 1 ; x64-based Systems Service Pack 1 ; x64-based Systems Service Pack 1 (Server Core installation) | An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka "Windows | MEDIUM 6.5 | 6.3 % | ||
| CVE-2018-8420 | | A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka "MS XML Remote Code | HIGH 8.8 | 49 % | ||
| CVE-2018-8419 | | An information disclosure vulnerability exists when the Windows kernel fails to properly initialize a memory address, aka "Windows Kernel In | MEDIUM 5.5 | 1.7 % | ||
| CVE-2018-8410 | | An elevation of privilege vulnerability exists when the Windows Kernel API improperly handles registry objects in memory, aka "Windows Regis | HIGH 7.8 | 4.0 % | ||
| CVE-2018-8393 | | A buffer overflow vulnerability exists in the Microsoft JET Database Engine that could allow remote code execution on an affected system, ak | HIGH 7.8 | 22 % | ||
| CVE-2018-8392 | | A buffer overflow vulnerability exists in the Microsoft JET Database Engine that could allow remote code execution on an affected system, ak | HIGH 7.8 | 23 % | ||
| CVE-2018-8336 | Itanium-Based Systems Service Pack 1 ; x64-based Systems Service Pack 1 ; x64-based Systems Service Pack 1 (Server Core installation) | An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information | MEDIUM 5.5 | 2.8 % | ||
| CVE-2018-8332 | | A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka "Win32k | HIGH 8.8 | 19 % | ||
| CVE-2018-8271 | | An information disclosure vulnerability exists in Windows when the Windows bowser.sys kernel-mode driver fails to properly handle objects in | MEDIUM 5.5 | 2.8 % | ||
| CVE-2018-8404 | | An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k | HIGH 7.0 | 1.2 % | ||
| CVE-2018-8398 | | An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka "Windows | MEDIUM 6.5 | 8.5 % | ||
| CVE-2018-8397 | Itanium-Based Systems Service Pack 1 ; x64-based Systems Service Pack 1 ; x64-based Systems Service Pack 1 (Server Core installation) | A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka | HIGH 8.8 | 68 % | ||
| CVE-2018-8396 | Itanium-Based Systems Service Pack 1 ; x64-based Systems Service Pack 1 ; x64-based Systems Service Pack 1 (Server Core installation) | An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka "Windows | MEDIUM 4.7 | 2.6 % | ||
| CVE-2018-8394 | | An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka "Windows | MEDIUM 6.5 | 8.5 % | ||
| CVE-2018-8349 | | A remote code execution vulnerability exists in "Microsoft COM for Windows" when it fails to properly handle serialized objects, aka "Micros | HIGH 8.8 | 23 % | ||
| CVE-2018-8348 | | An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information | MEDIUM 4.7 | 2.4 % | ||
| CVE-2018-8346 | Itanium-Based Systems Service Pack 1 ; x64-based Systems Service Pack 1 ; x64-based Systems Service Pack 1 (Server Core installation) | A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed, aka "L | HIGH 8.8 | 20 % | ||
| CVE-2018-8345 | | A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed, aka "L | HIGH 7.5 | 15 % | ||
| CVE-2018-8344 | | A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka "Microso | HIGH 8.8 | 23 % | ||
| CVE-2018-8343 | | An elevation of privilege vulnerability exists in the Network Driver Interface Specification (NDIS) when ndis.sys fails to check the length | HIGH 7.8 | 1.3 % | ||
| CVE-2018-8342 | Itanium-Based Systems Service Pack 1 ; x64-based Systems Service Pack 1 ; x64-based Systems Service Pack 1 (Server Core installation) | An elevation of privilege vulnerability exists in the Network Driver Interface Specification (NDIS) when ndis.sys fails to check the length | HIGH 7.8 | 1.3 % | ||
| CVE-2018-8341 | | An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information | MEDIUM 4.7 | 2.9 % | ||
| CVE-2018-8339 | | An elevation of privilege vulnerability exists in the Windows Installer when the Windows Installer fails to properly sanitize input leading | HIGH 7.0 | 1.2 % | ||
| CVE-2018-8314 | | An elevation of privilege vulnerability exists when Windows fails a check, allowing a sandbox escape, aka "Windows Elevation of Privilege Vu | MEDIUM 4.7 | 4.2 % | ||
| CVE-2018-8309 | | A denial of service vulnerability exists when Windows improperly handles objects in memory, aka "Windows Denial of Service Vulnerability." T | MEDIUM 5.5 | 1.7 % | ||
| CVE-2018-8308 | | An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka "Windows Kernel Eleva | MEDIUM 6.6 | 3.9 % | ||
| CVE-2018-8307 | | A security feature bypass vulnerability exists when Microsoft WordPad improperly handles embedded OLE objects, aka "WordPad Security Feature | MEDIUM 5.3 | 3.8 % | ||
| CVE-2018-8304 | | A denial of service vulnerability exists in Windows Domain Name System (DNS) DNSAPI.dll when it fails to properly handle DNS responses, aka | MEDIUM 5.9 | 13 % | ||
| CVE-2018-8282 | | An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, ak | HIGH 7.8 | 1.3 % | ||
| CVE-2018-8206 | | A denial of service vulnerability exists when Windows improperly handles File Transfer Protocol (FTP) connections, aka "Windows FTP Server D | HIGH 7.5 | 12 % | ||
| CVE-2018-8251 | | A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka "Media Foundation Memory Co | HIGH 7.5 | 7.8 % | ||
| CVE-2018-8225 | | A remote code execution vulnerability exists in Windows Domain Name System (DNS) DNSAPI.dll when it fails to properly handle DNS responses, | HIGH 8.1 | 24 % | ||
| CVE-2018-8224 | Itanium-Based Systems Service Pack 1 ; x64-based Systems Service Pack 1 ; x64-based Systems Service Pack 1 (Server Core installation) | An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka "Windows Kernel Eleva | HIGH 7.0 | 1.2 % | ||
| CVE-2018-8207 | | An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information | MEDIUM 4.7 | 2.5 % | ||
| CVE-2018-8205 | | A denial of service vulnerability exists when Windows improperly handles objects in memory, aka "Windows Denial of Service Vulnerability." T | MEDIUM 5.5 | 1.7 % | ||
| CVE-2018-8169 | | An elevation of privilege vulnerability exists when the (Human Interface Device) HID Parser Library driver improperly handles objects in mem | HIGH 7.0 | 1.2 % | ||
| CVE-2018-1040 | | A denial of service vulnerability exists in the way that the Windows Code Integrity Module performs hashing, aka "Windows Code Integrity Mod | MEDIUM 5.3 | 7.2 % | ||
| CVE-2018-1036 | | An elevation of privilege vulnerability exists when NTFS improperly checks access, aka "NTFS Elevation of Privilege Vulnerability." This aff | HIGH 7.0 | 1.1 % | ||
| CVE-2018-8174 | | A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Rem | HIGH 7.5 | 88 % | KEV | |
| CVE-2018-8167 | | An elevation of privilege vulnerability exists when the Windows Common Log File System (CLFS) driver improperly handles objects in memory, a | HIGH 7.0 | 1.0 % | ||
| CVE-2018-8166 | | An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k | HIGH 7.0 | 1.2 % | ||
| CVE-2018-8164 | | An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k | HIGH 7.8 | 1.5 % | ||
| CVE-2018-8136 | | A remote code execution vulnerability exists in the way that Windows handles objects in memory, aka "Windows Remote Code Execution Vulnerabi | HIGH 7.8 | 23 % | ||
| CVE-2018-8127 | | An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information | MEDIUM 5.5 | 2.9 % | ||
| CVE-2018-8124 | | An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k | HIGH 7.0 | 1.2 % | ||
| CVE-2018-8120 | Itanium-Based Systems Service Pack 1 ; x64-based Systems Service Pack 1 ; x64-based Systems Service Pack 1 (Server Core installation) | An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k | HIGH 7.0 | 73 % | KEV | |
| CVE-2018-0959 | | A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated us | HIGH 7.6 | 9.8 % | ||
| CVE-2018-8116 | | A denial of service vulnerability exists in the way that Windows handles objects in memory, aka "Microsoft Graphics Component Denial of Serv | MEDIUM 5.5 | 1.4 % | ||
| CVE-2018-1015 | | A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka "Microso | HIGH 8.8 | 23 % | ||
| CVE-2018-1013 | | A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka "Microso | HIGH 8.8 | 23 % | ||
| CVE-2018-1012 | | A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka "Microso | HIGH 8.8 | 23 % | ||
| CVE-2018-1008 | | An elevation of privilege vulnerability exists in Windows Adobe Type Manager Font Driver (ATMFD.dll) when it fails to properly handle object | HIGH 7.0 | 1.1 % | ||
| CVE-2018-1004 | | A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Rem | HIGH 8.8 | 19 % | ||
| CVE-2018-1003 | | A buffer overflow vulnerability exists in the Microsoft JET Database Engine that could allow remote code execution on an affected system, ak | HIGH 7.8 | 23 % | ||
| CVE-2018-0976 | | A denial of service vulnerability exists in Remote Desktop Protocol (RDP) when an attacker connects to the target system using RDP and sends | MEDIUM 5.3 | 4.7 % | ||
| CVE-2018-0975 | | An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to | MEDIUM 5.5 | 2.9 % | ||
| CVE-2018-0974 | | An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to | MEDIUM 5.5 | 3.4 % | ||
| CVE-2018-0973 | | An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to | MEDIUM 5.5 | 3.4 % | ||
| CVE-2018-0972 | | An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to | MEDIUM 5.5 | 3.4 % | ||
| CVE-2018-0971 | | An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to | MEDIUM 5.5 | 3.4 % | ||
| CVE-2018-0970 | | An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to | MEDIUM 5.5 | 3.4 % | ||
| CVE-2018-0969 | | An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to | MEDIUM 5.5 | 3.4 % | ||
| CVE-2018-0960 | | An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information | MEDIUM 5.5 | 1.8 % | ||
| CVE-2018-0887 | | An information disclosure vulnerability exists when the Windows kernel fails to properly initialize a memory address, aka "Windows Kernel In | MEDIUM 5.5 | 1.8 % |