CVE-2018-0750
MEDIUMWindows 7 SP1 and Windows Server 2008 SP2 and R2 SP1 - Information Disclosure in GDI Component
Title source: llmDescription
The Windows GDI component in Windows 7 SP1 and Windows Server 2008 SP2 and R2 SP1 allows an information disclosure vulnerability due to the way objects are handled in memory, aka "Windows Elevation of Privilege Vulnerability".
References (3)
Core 3
Core References
Vendor Advisory x_refsource_confirm
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0750
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1040091
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/102357
Scores
CVSS v3
5.5
EPSS
0.0170
EPSS Percentile
75.0%
Attack Vector
LOCAL
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Details
Status
published
Products (3)
microsoft/windows_7
microsoft/windows_server_2008
microsoft/windows_server_2008
r2 sp1
Published
Jan 04, 2018
Tracked Since
Feb 18, 2026