CVE-2018-8060

MEDIUM 5.5CVE-2018-8060 · Published 10/05/2018 · updated 17/06/2026

In short

CVE-2018-8060 is a MEDIUM (CVSS 5.5) vulnerability affecting amd64 kernel driver (hwinfo).
Chance of exploitation in the next 30 days (EPSS): 0.53%, higher than 45.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
amd64 kernel driver hwinfo	`≤ 8.98`	No fix yet

Description

HWiNFO AMD64 Kernel driver version 8.98 and lower allows an unprivileged user to send an IOCTL to the device driver. If input and/or output buffer pointers are NULL or if these buffers' data are invalid, a NULL/invalid pointer access occurs, resulting in a Windows kernel panic aka Blue Screen. This affects IOCTLs higher than 0x85FE2600 with the HWiNFO32 symbolic device name.

References

otavioarj/SIOCtl · Exploit

More vulnerabilities in amd64 kernel driver

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free