{"id":"CVE-2018-8121","aliases":["EUVD-2018-19797","GHSA-36xf-5ww9-9jq3"],"status":"published","title":"An information disclosure vulnerability exists when the Windows kernel improperly initializes...","description":"An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory, aka \"Windows Kernel Information Disclosure Vulnerability.\" This affects Windows 10 Servers, Windows 10. This CVE ID is unique from CVE-2018-8207.","severity":{"version":"3.0","score":4.7,"vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01546,"percentile":0.75165,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-665"],"published":"2018-06-14T12:00:00Z","modified":"2026-06-17T02:04:18Z","products":[{"vendor":"microsoft","product":"windows 10"},{"vendor":"microsoft","product":"windows 10 servers"},{"vendor":"microsoft","product":"windows_10"},{"vendor":"microsoft","product":"windows_server_2016"}],"references":[{"url":"http://www.securitytracker.com/id/1041113","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/104380","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8121","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-8121"},{"url":"https://github.com/advisories/GHSA-36xf-5ww9-9jq3"}],"sources":{"cve":[{"id":"CVE-2018-8121","description":"An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory, aka \"Windows Kernel Information Disclosure Vulnerability.\" This affects Windows 10 Servers, Windows 10. This CVE ID is unique from CVE-2018-8207.","status":"published","published":"2018-06-14T12:00:00Z","modified":"2024-08-05T06:46:13.297Z","updated_at":"2026-11-02T14:35:04.172099Z"}],"euvd":[{"id":"EUVD-2018-19797","description":"An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory, aka \"Windows Kernel Information Disclosure Vulnerability.\" This affects Windows 10 Servers, Windows 10. This CVE ID is unique from CVE-2018-8207.","status":"published","published":"2018-06-14T12:00:00Z","modified":"2024-08-05T06:46:13Z","updated_at":"2026-11-03T02:40:04.215722Z"}],"ghsa":[{"id":"GHSA-36xf-5ww9-9jq3","title":"An information disclosure vulnerability exists when the Windows kernel improperly initializes...","description":"An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory, aka \"Windows Kernel Information Disclosure Vulnerability.\" This affects Windows 10 Servers, Windows 10. This CVE ID is unique from CVE-2018-8207.","status":"published","published":"2022-05-13T01:20:39Z","modified":"2023-02-01T05:06:04Z","cvss":[{"version":"3.0","score":4.7,"vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-665"],"updated_at":"2026-11-02T14:50:19.146831Z"}],"nvd":[{"id":"CVE-2018-8121","description":"An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory, aka \"Windows Kernel Information Disclosure Vulnerability.\" This affects Windows 10 Servers, Windows 10. This CVE ID is unique from CVE-2018-8207.","status":"published","published":"2018-06-14T12:29:00.663Z","modified":"2026-06-17T02:04:18.123Z","cvss":[{"version":"3.0","score":4.7,"vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":1.9,"vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-665"],"updated_at":"2026-11-02T14:04:29.837913Z"}]}}