VULNERABILITY INTELLIGENCE
CVE-2018-8306
CVSS score5.5 MEDIUM
EPSS probability3.12%
CISA KEVNot currently listed
Published2018-07-11
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Description
A command injection vulnerability exists in the Microsoft Wireless Display Adapter (MWDA) when the Microsoft Wireless Display Adapter does not properly manage user input, aka "Microsoft Wireless Display Adapter Command Injection Vulnerability." This affects Microsoft Wireless Display Adapter V2 Software.
Weakness classification
- CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection')
Primary references
- secure@microsoft.com — Third Party Advisory, VDB Entry
- secure@microsoft.com — Third Party Advisory, VDB Entry
- secure@microsoft.com — Patch, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory