CVE-2018-0900

CVE-2018-0900 is an information disclosure vulnerability in the Windows kernel affecting numerous versions of Microsoft Windows and Windows Server, including Windows 7, 8.1, 10, and various Server editions. This medium-severity vulnerability (CVSS 4.7) allows a local attacker with low privileges to disclose sensitive memory addresses due to improper handling, potentially aiding further attacks. While the potential impact is high for confidentiality, there is no known active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or inclusion in CISA's KEV catalog. Despite limited community discussion and media coverage, it was addressed in Microsoft's March Patch Tuesday.