195
VMScore

CVE-2018-0745

Published: 04/01/2018 Updated: 24/08/2020
CVSS v2 Base Score: 1.9 | Impact Score: 2.9 | Exploitability Score: 3.4
CVSS v3 Base Score: 4.7 | Impact Score: 3.6 | Exploitability Score: 1
VMScore: 195
Vector: AV:L/AC:M/Au:N/C:P/I:N/A:N

Vulnerability Summary

The Windows kernel in Windows 10 version 1703. Windows 10 version 1709, and Windows Server, version 1709 allows an information disclosure vulnerability due to the way objects are handled in memory, aka "Windows Information Disclosure Vulnerability". This CVE ID is unique from CVE-2018-0746 and CVE-2018-0747.

Vulnerable Product Search on Vulmon Subscribe to Product

microsoft windows 10 1703

microsoft windows server 2016 1709

microsoft windows 10 1709

Exploits

/* We have discovered that the nt!NtQueryInformationProcess system call invoked with the 76 information class discloses portions of uninitialized kernel stack memory to user-mode clients The specific information class is handled by an internal nt!PsQueryProcessEnergyValues function While we don't know the layout of the output structure, we have ...