5.4

CVE-2018-8434

An information disclosure vulnerability exists when Windows Hyper-V on a host operating system fails to properly validate input from an authenticated user on a guest operating system, aka "Windows Hyper-V Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.

Data is provided by the National Vulnerability Database (NVD)
Microsoft ≫ Windows 10 Version- HwPlatformx64
Microsoft ≫ Windows 10 Version1607 HwPlatformx64
Microsoft ≫ Windows 10 Version1703 HwPlatformx64
Microsoft ≫ Windows 10 Version1709 HwPlatformx64
Microsoft ≫ Windows 10 Version1803 HwPlatformx64
Microsoft ≫ Windows 7 Version- Updatesp1 HwPlatformx64
Microsoft ≫ Windows 8.1 Version- HwPlatformx64
Microsoft ≫ Windows 8.1 Version- SwEditionrt
Microsoft ≫ Windows Server 2016 Version1709
Microsoft ≫ Windows Server 2016 Version1803
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 1.43% 0.799
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 5.4 1 4
CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N
nvd@nist.gov 5.2 4.4 6.9
AV:A/AC:M/Au:S/C:C/I:N/A:N
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

http://www.securitytracker.com/id/1041624
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/105239
Third Party Advisory
VDB Entry