CVE-2018-0810

Severity: medium (CVSS 4.7 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-02-15 · updated 2026-06-17
Weakness: CWE-665

Description

The Windows kernel in Windows 7 SP1, Windows Server 2008 SP2 and R2, and Windows Server 2012 allows an information disclosure vulnerability due to the way memory is initialized, aka "Windows Kernel Information Disclosure Vulnerability". This CVE is unique from CVE-2018-0757.

Affected products

Microsoft Windows 7: all versions
Microsoft Windows Server 2008: r2-sp1
Microsoft Windows Server 2012: all versions
Microsoft Corporation Windows: Windows 7 SP1, Windows Server 2008, and Windows Server 2012

References

http://www.securityfocus.com/bid/102938
http://www.securitytracker.com/id/1040373
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0810
http://www.securityfocus.com/bid/102938
http://www.securitytracker.com/id/1040373
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0810

Get alerted when CVE-2018-0810 or the next vulnerability affects your stack