VULNERABILITY INTELLIGENCE

CVE-2018-8612

CVSS score5.5 MEDIUM

EPSS probability1.42%

CISA KEVNot currently listed

Published2018-12-12

Last modified2026-06-17

CVSS vectorCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Description

A Denial Of Service vulnerability exists when Connected User Experiences and Telemetry Service fails to validate certain function values, aka "Connected User Experiences and Telemetry Service Denial of Service Vulnerability." This affects Windows Server 2016, Windows 10, Windows Server 2019, Windows 10 Servers.

Weakness classification

CWE-20: Improper Input Validation

Primary references

secure@microsoft.com — Third Party Advisory, VDB Entry
secure@microsoft.com — Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory