What is CVE-2018-0901?

CVE-2018-0901 is a medium-severity vulnerability in Microsoft Windows 10, classified under Missing Release of Memory after Effective Lifetime. CVSS score: 4.7/10. Published 2018-03-14.

How severe is CVE-2018-0901?

Medium severity. CVSS v3 base score is 4.7 out of 10.

Vulnerability in Microsoft Windows 10

CVE-2018-0901

The Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an information disclosure vulnerability due to the way memory addresses are handled, aka "Windows Kernel Information Disclosure Vulnerability". This CVE is unique from CVE-2018-0811, CVE-2018-0813, CVE-2018-0814, CVE-2018-0894, CVE-2018-0895, CVE-2018-0896, CVE-2018-0897, CVE-2018-0898, CVE-2018-0899, CVE-2018-0900, and CVE-2018-0926.

EPSS: 0.024 (82.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.7 (Medium). Vector: CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N.

Affected products

Microsoft Windows_10 — versions 1511, 1607, 1703
Microsoft Windows_7
Microsoft Windows_8.1
Microsoft Windows_rt_8.1
Microsoft Windows_server — versions 1709
Microsoft Windows_server_2008 — versions r2
Microsoft Windows_server_2012 — versions r2
Microsoft Windows_server_2016
Microsoft Corporation Windows Kernel — versions Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709

Weakness classification (CWE)

References

secure@microsoft.com (x_refsource_CONFIRM, Patch, Vendor Advisory)
secure@microsoft.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_SECTRACK)
secure@microsoft.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
secure@microsoft.com (Exploit, VDB Entry, Third Party Advisory, exploit, x_refsource_EXPLOIT-DB)

Frequently asked questions

What is CVE-2018-0901?: CVE-2018-0901 is a medium-severity vulnerability in Microsoft Windows 10, classified under Missing Release of Memory after Effective Lifetime. CVSS score: 4.7/10. Published 2018-03-14.
How severe is CVE-2018-0901?: Medium severity. CVSS v3 base score is 4.7 out of 10.