CVE-2018-0745

MEDIUM

Windows 10 1703-1709 and Windows Server 2016 - Information Disclosure via Memory Object Handling

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2018-0745. PoCs published by Google Security Research.

AI-analyzed exploit summary This exploit demonstrates an information leak vulnerability in Windows 10 version 1709 32-bit via the nt!NtQueryInformationProcess system call with information class 76. It sprays the kernel stack with controlled data and leaks uninitialized kernel stack memory to user-mode.

Description

The Windows kernel in Windows 10 version 1703. Windows 10 version 1709, and Windows Server, version 1709 allows an information disclosure vulnerability due to the way objects are handled in memory, aka "Windows Information Disclosure Vulnerability". This CVE ID is unique from CVE-2018-0746 and CVE-2018-0747.

Exploits (1)

exploitdb WORKING POC VERIFIED
by Google Security Research · c++doswindows
https://www.exploit-db.com/exploits/43470

This exploit demonstrates an information leak vulnerability in Windows 10 version 1709 32-bit via the nt!NtQueryInformationProcess system call with information class 76. It sprays the kernel stack with controlled data and leaks uninitialized kernel stack memory to user-mode.

Classification
Working Poc 100%
Attack Type
Info Leak
Complexity
Moderate
Reliability
Reliable
Target: Microsoft Windows 10 version 1709 32-bit
Auth required
Prerequisites: Local authenticated access to a vulnerable Windows 10 version 1709 32-bit system
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (4)

Core 4
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1040097
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/102353
Third Party Advisory, VDB Entry exploit x_refsource_exploit-db
https://www.exploit-db.com/exploits/43470/

Scores

CVSS v3 4.7
EPSS 0.0287
EPSS Percentile 84.9%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

Details

CWE
CWE-665
Status published
Products (3)
microsoft/windows_10 1703
microsoft/windows_10 1709
microsoft/windows_server_2016 1709
Published Jan 04, 2018
Tracked Since Feb 18, 2026