CVE-2018-8170

At a glance

Severity: Not available
EPSS: EPSS 1.00 % · percentile 63 (2026-10-27)
State: PUBLISHED
Published: 2018-05-09
Updated: 2024-08-05
Assigner: microsoft
NVD status: Modified

Description

An elevation of privilege vulnerability exists in the way that the Windows kernel image handles objects in memory, aka "Windows Image Elevation of Privilege Vulnerability." This affects Windows 10, Windows 10 Servers.

Scores

Version	Score	Vector	Scored by
CVSS 3.0	HIGH 7.0	CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H	NVD · nvd@nist.gov (Primary)
CVSS 2.0	MEDIUM 4.4	AV:L/AC:M/Au:N/C:P/I:P/A:P	NVD · nvd@nist.gov (Primary)

Weaknesses (CWE)

CWE-404

European references

ENISA EUVD · EUVD-2018-19841
GCVE · GCVE-0-2018-8170

CERT-FR advisories

CERTFR-2018-AVI-221 — Multiples vulnérabilités dans Microsoft Windows · cert.ssi.gouv.fr

Affected configurations (NVD CPE)

cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2016:1709:*:*:*:*:*:*:*

Affected products

Product	Versions
Microsoft · Windows 10	affected Version 1703 for 32-bit Systems ; affected Version 1703 for x64-based Systems ; affected Version 1709 for 32-bit Systems ; affected Version 1709 for x64-based Systems
Microsoft · Windows 10 Servers	affected version 1709 (Server Core Installation)

References

Sources

Source	Licence
CVE List (CVEProject cvelistV5)	CVE Program Terms of Use
EPSS (FIRST.org)	FIRST — attribution requested
ENISA EUVD	ENISA — reproduction authorised, source acknowledged
CERT-FR (ANSSI)	Licence Ouverte / Etalab 2.0
NVD (NIST) via fkie-cad/nvd-json-data-feeds	Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD