CVE-2018-8209

8.0 highEPSS 2.9%

An information disclosure vulnerability exists when Windows allows a normal user to access the Wireless LAN profile of an administrative user, aka "Windows Wireless Network Profile Information Disclosure Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers.

Severity

CVSS 3.0

8.0 high

CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 2.9% chance of exploitation in the next 30 days; higher than 87% of CVEs (scores of 2026-10-31)
CWE: CWE-200
Published: 2018-06-14
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

microsoft:windows_10
microsoft:windows_server_2016

References

http://www.securityfocus.com/bid/104393
http://www.securitytracker.com/id/1041101
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8209
http://www.securityfocus.com/bid/104393
http://www.securitytracker.com/id/1041101

Check your stack JSON