CVE-2018-8506

Summary

An Information Disclosure vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory, aka "Microsoft Windows Codecs Library Information Disclosure Vulnerability." This affects Windows 10 Servers, Windows 10, Windows Server 2019.

Impact & exploitability

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Affected products we track (3)

Recommendation

Apply the vendor fix in your normal patch cycle. Open any affected product above for its exact safe version.

Official patch: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8506 ↗

Additional information

• NVD record
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8506Patch
• http://www.securityfocus.com/bid/105466Advisory
• http://www.securitytracker.com/id/1041833Advisory