deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-12150
Published: 2018-09-12
Description: Escalation of privilege in Installer for Intel Extreme Tuning Utility before 6.4.1.21 may allow an authenticated user to potentially execute code or disclose information as administrator via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-119
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00162.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00162.html
CVE: CVE-2018-12151
Published: 2018-09-12
Description: Buffer overflow in installer for Intel Extreme Tuning Utility before 6.4.1.21 may allow an authenticated user to potentially cause a buffer overflow potentially leading to a denial of service via local access.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00162.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00162.html
CVE: CVE-2018-12160
Published: 2018-09-12
Description: DLL injection vulnerability in software installer for Intel Data Center Migration Center Software v3.1 and before may allow an authenticated user to potentially execute code using default directory permissions via local access.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-276, CWE-427
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00170.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00170.html
CVE: CVE-2018-12162
Published: 2018-09-12
Description: Directory permissions in the Intel OpenVINO Toolkit for Windows before version 2018.1.265 may allow an authenticated user to potentially execute code using default directory permissions via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-732
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00172.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00172.html
CVE: CVE-2018-12163
Published: 2018-09-12
Description: A DLL injection vulnerability in the Intel IoT Developers Kit 4.0 installer may allow an authenticated user to potentially escalate privileges using file modification via local access.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-427
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00173.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00173.html
CVE: CVE-2018-12168
Published: 2018-09-12
Description: Privilege escalation in file permissions in Intel Computing Improvement Program before version 2.2.0.03942 may allow an authenticated user to potentially execute code as administrator via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-732
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00165.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00165.html
CVE: CVE-2018-12171
Published: 2018-09-12
Description: Privilege escalation in Intel Baseboard Management Controller (BMC) firmware before version 1.43.91f76955 may allow an unprivileged user to potentially execute arbitrary code or perform denial of service over the network.
CVSS Score: 9.8 (CRITICAL)
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00149.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00149.html
CVE: CVE-2018-12175
Published: 2018-09-12
Description: Default install directory permissions in Intel Distribution for Python (IDP) version 2018 may allow an unprivileged user to escalate privileges via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-276
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00181.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00181.html
CVE: CVE-2018-12176
Published: 2018-09-12
Description: Improper input validation in firmware for Intel NUC Kits may allow a privileged user to potentially execute arbitrary code resulting in information disclosure, escalation of privilege and/or denial of service via local access.
CVSS Score: 8.2 (HIGH)
CWE: CWE-20
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00176.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00176.html
CVE: CVE-2018-3616
Published: 2018-09-12
Description: Bleichenbacher-style side channel vulnerability in TLS implementation in Intel Active Management Technology before 12.0.5 may allow an unauthenticated user to potentially obtain the TLS session key via the network.
CVSS Score: 5.9 (MEDIUM)
References: http://www.securityfocus.com/bid/106996; https://cert-portal.siemens.com/productcert/pdf/ssa-377318.pdf; https://ics-cert.us-cert.gov/advisories/ICSA-19-043-05
CVE: CVE-2018-3643
Published: 2018-09-12
Description: A vulnerability in Power Management Controller firmware in systems using specific Intel(R) Converged Security and Management Engine (CSME) before version 11.8.55, 11.11.55, 11.21.55, 12.0.6 or Intel(R) Server Platform Services firmware before version 4.x.04 may allow an attacker with administrative privileges to uncover certain platform secrets via local access or to potentially execute arbitrary code.
CVSS Score: 8.2 (HIGH)
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03873en_us; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00131.html
CVE: CVE-2018-3655
Published: 2018-09-12
Description: A vulnerability in a subsystem in Intel CSME before version 11.21.55, Intel Server Platform Services before version 4.0 and Intel Trusted Execution Engine Firmware before version 3.1.55 may allow an unauthenticated user to potentially modify or disclose information via physical access.
CVSS Score: 7.3 (HIGH)
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03873en_us; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00125.html
CVE: CVE-2018-3657
Published: 2018-09-12
Description: Multiple buffer overflows in Intel AMT in Intel CSME firmware versions before version 12.0.5 may allow a privileged user to potentially execute arbitrary code with Intel AMT execution privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-119
References: http://www.securityfocus.com/bid/106996; https://cert-portal.siemens.com/productcert/pdf/ssa-377318.pdf; https://ics-cert.us-cert.gov/advisories/ICSA-19-043-05
CVE: CVE-2018-3658
Published: 2018-09-12
Description: Multiple memory leaks in Intel AMT in Intel CSME firmware versions before 12.0.5 may allow an unauthenticated user with Intel AMT provisioned to potentially cause a partial denial of service via network access.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-772
References: http://www.securityfocus.com/bid/106996; https://cert-portal.siemens.com/productcert/pdf/ssa-377318.pdf; https://ics-cert.us-cert.gov/advisories/ICSA-19-043-05
CVE: CVE-2018-3659
Published: 2018-09-12
Description: A vulnerability in Intel PTT module in Intel CSME firmware before version 12.0.5 and Intel TXE firmware before version 4.0 may allow an unauthenticated user to potentially disclose information via physical access.
CVSS Score: 6.8 (MEDIUM)
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00142.html; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2018-3669
Published: 2018-09-12
Description: A STOP error (BSoD) in the ibtfltcoex.sys driver for Intel Centrino Wireless N and Intel Centrino Advanced N adapters may allow an unauthenticated user to potentially send a malformed L2CAP Connection Request is sent to the Intel Bluetooth device via the network.
CVSS Score: 7.5 (HIGH)
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00177.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00177.html
CVE: CVE-2018-3679
Published: 2018-09-12
Description: Escalation of privilege in Reference UI in Intel Data Center Manager SDK 5.0 and before may allow an unauthorized remote unauthenticated user to potentially execute code via administrator privileges.
CVSS Score: 9.6 (CRITICAL)
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00143.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00143.html
CVE: CVE-2018-3686
Published: 2018-09-12
Description: Code injection vulnerability in INTEL-SA-00086 Detection Tool before version 1.2.7.0 may allow a privileged user to potentially execute arbitrary code via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-94
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00119.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00119.html
CVE: CVE-2018-16962
Published: 2018-09-12
Description: Webroot SecureAnywhere before 9.0.8.34 on macOS mishandles access to the driver by a process that lacks root privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-123
References: http://answers.webroot.com/Webroot/ukp.aspx?pid=10&app=vw&vw=1&login=1&json=1&solutionid=2022; https://www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2018-009/?fid=11720; https://www.trustwave.com/Resources/SpiderLabs-Blog/CVE-2018-16962--Webroot-SecureAnywhere-macOS-Kernel-Level-Memory-Corruption/
CVE: CVE-2018-16970
Published: 2018-09-12
Description: Wisetail Learning Ecosystem (LE) through v4.11.6 allows insecure direct object reference (IDOR) attacks to download non-purchased course files via a modified id parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-538
References: https://blog.ziaurrashid.com/wisetail-learning-ecosystem-multiple-idor-vunlerability/; https://blog.ziaurrashid.com/wisetail-learning-ecosystem-multiple-idor-vunlerability/
CVE: CVE-2018-16971
Published: 2018-09-12
Description: Wisetail Learning Ecosystem (LE) through v4.11.6 allows insecure direct object reference (IDOR) attacks to access non-purchased course contents (quiz / test) via a modified id parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-639
References: https://blog.ziaurrashid.com/wisetail-learning-ecosystem-multiple-idor-vunlerability/; https://blog.ziaurrashid.com/wisetail-learning-ecosystem-multiple-idor-vunlerability/
CVE: CVE-2018-15610
Published: 2018-09-12
Description: A vulnerability in the one-X Portal component of Avaya IP Office allows an authenticated attacker to read and delete arbitrary files on the system. Affected versions of Avaya IP Office include 9.1 through 9.1 SP12, 10.0 through 10.0 SP7, and 10.1 through 10.1 SP2.
CVSS Score: 7.3 (HIGH)
CWE: CWE-284, CWE-22
References: https://downloads.avaya.com/css/P8/documents/101051984; https://packetstormsecurity.com/files/149284/Avaya-one-X-9.x-10.0.x-10.1.x-Arbitrary-File-Disclosure-Deletion.html; https://downloads.avaya.com/css/P8/documents/101051984
CVE: CVE-2018-16974
Published: 2018-09-12
Description: An issue was discovered in Elefant CMS before 2.0.7. There is a PHP Code Execution Vulnerability in apps/filemanager/upload/drop.php by using /filemanager/api/rm/.htaccess to remove the .htaccess file, and then using a filename that ends in .php followed by space characters (for bypassing the blacklist).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://github.com/jbroadway/elefant/commit/49ba8cc24e9f009ce30d2c2eb9eefeb9be4ce1d0; https://github.com/jbroadway/elefant/issues/287; https://github.com/jbroadway/elefant/releases/tag/elefant_2_0_7_stable
CVE: CVE-2018-16975
Published: 2018-09-12
Description: An issue was discovered in Elefant CMS before 2.0.7. There is a PHP Code Execution Vulnerability in /designer/add/stylesheet.php by using a .php extension in the New Stylesheet Name field in conjunction with <?php content, because of insufficient input validation in apps/designer/handlers/csspreview.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://github.com/jbroadway/elefant/commit/0795ab57c7ffa53ff4af57e229f6d9680fa54a21; https://github.com/jbroadway/elefant/issues/286; https://github.com/jbroadway/elefant/releases/tag/elefant_2_0_7_stable
CVE: CVE-2018-16976
Published: 2018-09-12
Description: Gitolite before 3.6.9 does not (in certain configurations involving @all or a regex) properly restrict access to a Git repository that is in the process of being migrated until the full set of migration steps has been completed. This can allow valid users to obtain unintended access.
CVSS Score: 8.1 (HIGH)
CWE: CWE-362
References: https://bugs.debian.org/908699; https://github.com/sitaramc/gitolite/commit/dc13dfca8fdae5634bb0865f7e9822d2a268ed59; https://groups.google.com/forum/#%21topic/gitolite-announce/WrwDTYdbfRg
CVE: CVE-2018-16977
Published: 2018-09-12
Description: Monstra CMS V3.0.4 has an information leakage risk (e.g., PATH, DOCUMENT_ROOT, and SERVER_ADMIN) in libraries/Gelato/ErrorHandler/Resources/Views/Errors/exception.php.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://github.com/howchen/howchen/issues/4; https://github.com/howchen/howchen/issues/4
CVE: CVE-2018-16978
Published: 2018-09-12
Description: Monstra CMS V3.0.4 has XSS when ones tries to register an account with a crafted password parameter to users/registration, a different vulnerability than CVE-2018-11473.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/howchen/howchen/issues/4; https://github.com/howchen/howchen/issues/4
CVE: CVE-2018-16979
Published: 2018-09-12
Description: Monstra CMS V3.0.4 allows HTTP header injection in the plugins/captcha/crypt/cryptographp.php cfg parameter, a related issue to CVE-2012-2943.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-113
References: https://github.com/howchen/howchen/issues/4; https://github.com/howchen/howchen/issues/4
CVE: CVE-2018-16980
Published: 2018-09-12
Description: dotCMS V5.0.1 has XSS in the /html/portlet/ext/contentlet/image_tools/index.jsp fieldName and inode parameters.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/dotCMS/core/issues/15274; https://github.com/dotCMS/core/issues/15274
CVE: CVE-2018-16981
Published: 2018-09-12
Description: stb stb_image.h 2.19, as used in catimg, Emscripten, and other products, has a heap-based buffer overflow in the stbi__out_gif_code function.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://github.com/nothings/stb/issues/656; https://lists.debian.org/debian-lts-announce/2023/01/msg00045.html; https://github.com/nothings/stb/issues/656
CVE: CVE-2018-0965
Published: 2018-09-13
Description: A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka "Windows Hyper-V Remote Code Execution Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-8439.
CVSS Score: 8.4 (HIGH)
CWE: CWE-20
References: http://www.securityfocus.com/bid/105229; http://www.securitytracker.com/id/1041624; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0965
CVE: CVE-2018-8269
Published: 2018-09-13
Description: A denial of service vulnerability exists when OData Library improperly handles web requests, aka "OData Denial of Service Vulnerability." This affects Microsoft.Data.OData.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/bid/105322; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8269; https://www.exploit-db.com/exploits/46101/
CVE: CVE-2018-8271
Published: 2018-09-13
Description: An information disclosure vulnerability exists in Windows when the Windows bowser.sys kernel-mode driver fails to properly handle objects in memory, aka "Windows Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/105247; http://www.securitytracker.com/id/1041635; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8271
CVE: CVE-2018-8315
Published: 2018-09-13
Description: An information disclosure vulnerability exists when the browser scripting engine improperly handle object types, aka "Microsoft Scripting Engine Information Disclosure Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge, Internet Explorer 10.
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/105251; http://www.securitytracker.com/id/1041623; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8315
CVE: CVE-2018-8331
Published: 2018-09-13
Description: A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution Vulnerability." This affects Microsoft Office.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/105206; http://www.securitytracker.com/id/1041630; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8331
CVE: CVE-2018-8332
Published: 2018-09-13
Description: A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka "Win32k Graphics Remote Code Execution Vulnerability." This affects Windows 7, Microsoft Office, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2008 R2, Windows Server 2012, Windows Server 2016, Windows 8.1, Windows 10, Windows 10 Servers.
CVSS Score: 8.8 (HIGH)
References: http://www.securityfocus.com/bid/105248; http://www.securitytracker.com/id/1041628; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8332
CVE: CVE-2018-8335
Published: 2018-09-13
Description: A denial of service vulnerability exists in the Microsoft Server Block Message (SMB) when an attacker sends specially crafted requests to the server, aka "Windows SMB Denial of Service Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2012, Windows Server 2016, Windows 8.1, Windows 10, Windows 10 Servers.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/bid/105224; http://www.securitytracker.com/id/1041634; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8335
CVE: CVE-2018-8336
Published: 2018-09-13
Description: An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows Server 2008, Windows 7, Windows Server 2008 R2. This CVE ID is unique from CVE-2018-8419, CVE-2018-8442, CVE-2018-8443, CVE-2018-8445, CVE-2018-8446.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/105246; http://www.securitytracker.com/id/1041635; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8336
CVE: CVE-2018-8337
Published: 2018-09-13
Description: A security feature bypass vulnerability exists when Windows Subsystem for Linux improperly handles case sensitivity, aka "Windows Subsystem for Linux Security Feature Bypass Vulnerability." This affects Windows 10, Windows 10 Servers.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-178
References: http://www.securityfocus.com/bid/105250; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8337; http://www.securityfocus.com/bid/105250
CVE: CVE-2018-8354
Published: 2018-09-13
Description: A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8391, CVE-2018-8456, CVE-2018-8457, CVE-2018-8459.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/105232; http://www.securitytracker.com/id/1041623; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8354
CVE: CVE-2018-8366
Published: 2018-09-13
Description: An information disclosure vulnerability exists when the Microsoft Edge Fetch API incorrectly handles a filtered response type, aka "Microsoft Edge Information Disclosure Vulnerability." This affects Microsoft Edge.
CVSS Score: 3.1 (LOW)
CWE: CWE-200
References: http://www.securityfocus.com/bid/105253; http://www.securitytracker.com/id/1041623; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8366
CVE: CVE-2018-8367
Published: 2018-09-13
Description: A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8465, CVE-2018-8466, CVE-2018-8467.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/105245; http://www.securitytracker.com/id/1041623; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8367
CVE: CVE-2018-8391
Published: 2018-09-13
Description: A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore. This CVE ID is unique from CVE-2018-8354, CVE-2018-8456, CVE-2018-8457, CVE-2018-8459.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/105231; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8391; http://www.securityfocus.com/bid/105231
CVE: CVE-2018-8392
Published: 2018-09-13
Description: A buffer overflow vulnerability exists in the Microsoft JET Database Engine that could allow remote code execution on an affected system, aka "Microsoft JET Database Engine Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-8393.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/105213; http://www.securitytracker.com/id/1041625; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8392
CVE: CVE-2018-8393
Published: 2018-09-13
Description: A buffer overflow vulnerability exists in the Microsoft JET Database Engine that could allow remote code execution on an affected system, aka "Microsoft JET Database Engine Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-8392.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/105214; http://www.securitytracker.com/id/1041625; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8393
CVE: CVE-2018-8409
Published: 2018-09-13
Description: A denial of service vulnerability exists when System.IO.Pipelines improperly handles requests, aka "System.IO.Pipelines Denial of Service." This affects .NET Core 2.1, System.IO.Pipelines, ASP.NET Core 2.1.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/bid/105223; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8409; http://www.securityfocus.com/bid/105223
CVE: CVE-2018-8410
Published: 2018-09-13
Description: An elevation of privilege vulnerability exists when the Windows Kernel API improperly handles registry objects in memory, aka "Windows Registry Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.
CVSS Score: 7.8 (HIGH)
CWE: CWE-404
References: http://www.securityfocus.com/bid/105256; http://www.securitytracker.com/id/1041635; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8410