CVE-2018-8493

HIGH

Windows - Information Disclosure via Fragmented IP Packet Handling

Title source: llm

Description

An information disclosure vulnerability exists when the Windows TCP/IP stack improperly handles fragmented IP packets, aka "Windows TCP/IP Information Disclosure Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2016, Windows 8.1, Windows 10, Windows 10 Servers.

References (3)

Core 3

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id/1041843

Patch, Vendor Advisory x_refsource_confirm

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8493

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/105456

Scores

CVSS v3 7.5

EPSS 0.0842

EPSS Percentile 94.4%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Details

Status published

Products (10)

microsoft/windows_10_1507

microsoft/windows_10_1607

microsoft/windows_10_1703

microsoft/windows_10_1709

microsoft/windows_10_1803

microsoft/windows_8.1 (3 CPE variants)

microsoft/windows_server_1709

microsoft/windows_server_1803

microsoft/windows_server_2012 r2

microsoft/windows_server_2016

Published Oct 10, 2018

Tracked Since Feb 18, 2026