CVE-2018-8422

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka "Windows GDI Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2008 R2. This CVE ID is unique from CVE-2018-8424.

Score

CVSS 3.0 6.5 Medium

Status

Modified - secure@microsoft.com

Published

2018-09-13

Last modified

2024-08-05

Weaknesses

CWE-200

Affected products

• Windows 7 (Microsoft)
• Windows Server (Microsoft)
• Windows Server 2008 R2 (Microsoft)

References

• http://www.securityfocus.com/bid/105357
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8422