{"id":"CVE-2018-8621","aliases":["EUVD-2018-20234","GHSA-4v5x-6vf6-8x7f"],"status":"published","title":"An information disclosure vulnerability exists when the Windows kernel improperly handles objects...","description":"An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka \"Windows Kernel Information Disclosure Vulnerability.\" This affects Windows Server 2012, Windows 7, Windows Server 2008 R2. This CVE ID is unique from CVE-2018-8477, CVE-2018-8622.","severity":{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01835,"percentile":0.79067,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2018-12-12T00:00:00Z","modified":"2026-06-17T02:05:12Z","products":[{"vendor":"microsoft","product":"windows 7"},{"vendor":"microsoft","product":"windows server 2008 r2"},{"vendor":"microsoft","product":"windows server 2012"},{"vendor":"microsoft","product":"windows_7"},{"vendor":"microsoft","product":"windows_server_2008"},{"vendor":"microsoft","product":"windows_server_2012"}],"references":[{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8621","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/106085","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-8621"},{"url":"https://github.com/advisories/GHSA-4v5x-6vf6-8x7f"}],"sources":{"cve":[{"id":"CVE-2018-8621","description":"An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka \"Windows Kernel Information Disclosure Vulnerability.\" This affects Windows Server 2012, Windows 7, Windows Server 2008 R2. This CVE ID is unique from CVE-2018-8477, CVE-2018-8622.","status":"published","published":"2018-12-12T00:00:00Z","modified":"2024-08-05T07:02:25.808Z","updated_at":"2026-11-02T14:35:04.172099Z"}],"euvd":[{"id":"EUVD-2018-20234","description":"An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka \"Windows Kernel Information Disclosure Vulnerability.\" This affects Windows Server 2012, Windows 7, Windows Server 2008 R2. This CVE ID is unique from CVE-2018-8477, CVE-2018-8622.","status":"published","published":"2018-12-12T00:00:00Z","modified":"2024-08-05T07:02:25Z","updated_at":"2026-11-03T02:40:02.008103Z"}],"ghsa":[{"id":"GHSA-4v5x-6vf6-8x7f","title":"An information disclosure vulnerability exists when the Windows kernel improperly handles objects...","description":"An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka \"Windows Kernel Information Disclosure Vulnerability.\" This affects Windows Server 2012, Windows 7, Windows Server 2008 R2. This CVE ID is unique from CVE-2018-8477, CVE-2018-8622.","status":"published","published":"2022-05-13T01:21:02Z","modified":"2023-02-01T05:06:20Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T14:50:20.778256Z"}],"nvd":[{"id":"CVE-2018-8621","description":"An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka \"Windows Kernel Information Disclosure Vulnerability.\" This affects Windows Server 2012, Windows 7, Windows Server 2008 R2. This CVE ID is unique from CVE-2018-8477, CVE-2018-8622.","status":"published","published":"2018-12-12T00:29:01.183Z","modified":"2026-06-17T02:05:12.553Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":2.1,"vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","level":"low","assessor":"primary"}],"updated_at":"2026-11-02T14:04:49.995593Z"}]}}