CVE-2018-9151: A NULL pointer dereference bug in the function ObReferenceObjectByHandle in the Kingsoft Internet Security...

Security readout for executives and security teams

This issue can let a local, non-administrative user crash a Windows system running the vulnerable Kingsoft Internet Security kernel driver. The source bundle supports denial of service, not data theft, remote compromise, or privilege escalation. Exposure appears limited to systems with Kingsoft Internet Security 9+ and the KWatch3.sys kernel driver installed. The CVE record does not provide precise affected versions, CPEs, platforms, or patch levels. Treat this as an availability risk for affected endpoints, not as proven remote compromise. Prioritize asset discovery first because affected version detail is incomplete in the public CVE data. Mitigation focus: Inventory endpoints for Kingsoft Internet Security 9+ and KWatch3.sys.; Check Kingsoft vendor guidance for fixed versions or recommended removal steps.; Prioritize remediation on shared workstations, kiosks, and high-availability endpoints..

Prepared

Jun 7, 2026, 14:03 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.