CVE-2018-0757

CVE-2018-0757 is an information disclosure vulnerability in the Windows kernel, affecting numerous Windows client and server operating systems from Windows 7 to Windows 10 and Server 2016. This medium-severity vulnerability (CVSS 4.7) allows an attacker with low privileges and high attack complexity to potentially disclose sensitive information from memory. While the potential impact is high for confidentiality, there is no known active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion beyond a single mention. Microsoft addressed this vulnerability in their February Patch Tuesday updates.