Command injection in Microsoft Wireless Display Adapter V2 Software
Priority LOW 30CWE-77Published · Updated
Key facts
- Attack vector
- Adjacent network
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- Low · Low · Low
- Fix status
- No fix listed
Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-77.
Summary
A command injection vulnerability exists in the Microsoft Wireless Display Adapter (MWDA) when the Microsoft Wireless Display Adapter does not properly manage user input, aka "Microsoft Wireless Display Adapter Command Injection Vulnerability." This affects Microsoft Wireless Display Adapter V2 Software.
Why it matters now
EPSS 0.03119 87th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Microsoft | Microsoft Wireless Display Adapter V2 Software | Version 2.0.8350; Version 2.0.8365; Version 2.0.8372 | — | No fix listed | CNA |
- Microsoft Wireless Display Adapter V2 Software VendorMicrosoft Affected Version 2.0.8350; Version 2.0.8365; Version 2.0.8372 Fixed in — No fix listed CNA
CPE configurations NVD · 4
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:microsoft:wireless_display_adapter_firmware:2.0.8350:*:*:*:*:*:*:* | 2.0.8350 | Vulnerable | Microsoft |
| cpe:2.3:o:microsoft:wireless_display_adapter_firmware:2.0.8365:*:*:*:*:*:*:* | 2.0.8365 | Vulnerable | Microsoft |
| cpe:2.3:o:microsoft:wireless_display_adapter_firmware:2.0.8372:*:*:*:*:*:*:* | 2.0.8372 | Vulnerable | Microsoft |
| cpe:2.3:h:microsoft:wireless_display_adapter:2:*:*:*:*:*:*:* | 2 | Running on | Microsoft |
- cpe:2.3:o:microsoft:wireless_display_adapter_firmware:2.0.8350:*:*:*:*:*:*:* Versions 2.0.8350 Vulnerable ·Microsoft
- cpe:2.3:o:microsoft:wireless_display_adapter_firmware:2.0.8365:*:*:*:*:*:*:* Versions 2.0.8365 Vulnerable ·Microsoft
- cpe:2.3:o:microsoft:wireless_display_adapter_firmware:2.0.8372:*:*:*:*:*:*:* Versions 2.0.8372 Vulnerable ·Microsoft
- cpe:2.3:h:microsoft:wireless_display_adapter:2:*:*:*:*:*:*:* Versions 2 Running on ·Microsoft
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2018-8306
- 2026-10-03 Alias added: GHSA-m37p-x6xc-38vx
More Microsoft Wireless Display Adapter Firmware vulnerabilities
- TI-2021-19683 Microsoft 4K Wireless Display Adapter Remote Code Execution Vulnerability CVSS 3.1CRITICAL 9.8
Sources
- CVE-2018-8306 · CVE Program
- CVE-2018-8306 · NVD
- FIRST EPSS
- GHSA-m37p-x6xc-38vx · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences