CVE-2018-8239 describes an information disclosure vulnerability within the Windows GDI component, where it improperly discloses memory contents. This vulnerability impacts Windows 10, Windows Server 2016, and Windows Server version 1803. Rated as medium severity with a CVSS score of 5.5, exploitation requires local access and user interaction (AV:L/UI:R) with low attack complexity, leading to a high confidentiality impact (C:H) by revealing sensitive system memory. There is no known public exploit code available, nor is it listed in CISA's Known Exploited Vulnerabilities catalog. Community discussion and media coverage surrounding this CVE remain minimal.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
1607CPE matchmatch criteria | cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:* | ||
1703CPE matchmatch criteria | cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:* | ||
1709CPE matchmatch criteria | cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:* | ||
1803CPE matchmatch criteria | cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:* | ||
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:o:microsoft:windows_server_1803:-:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.