CVE-2018-8306

5.5 mediumEPSS 3.1%

A command injection vulnerability exists in the Microsoft Wireless Display Adapter (MWDA) when the Microsoft Wireless Display Adapter does not properly manage user input, aka "Microsoft Wireless Display Adapter Command Injection Vulnerability." This affects Microsoft Wireless Display Adapter V2 Software.

Severity

CVSS 3.0

5.5 medium

CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

EPSS: 3.1% chance of exploitation in the next 30 days; higher than 87% of CVEs (scores of 2026-10-31)
CWE: CWE-77
Published: 2018-07-11
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

microsoft:wireless_display_adapter_firmware

References

http://www.securityfocus.com/bid/104621
http://www.securitytracker.com/id/1041269
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8306
http://www.securityfocus.com/bid/104621
http://www.securitytracker.com/id/1041269

Check your stack JSON