CVE-2018-8170

Опубликовано: 09 мая 2018

Источник: nvd

CVSS3: 7

CVSS2: 4.4

EPSS Низкий

Описание

An elevation of privilege vulnerability exists in the way that the Windows kernel image handles objects in memory, aka "Windows Image Elevation of Privilege Vulnerability." This affects Windows 10, Windows 10 Servers.

Ссылки

http://www.securityfocus.com/bid/104068
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1040849
Third Party Advisory
VDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8170
Patch
Vendor Advisory
http://www.securityfocus.com/bid/104068
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1040849
Third Party Advisory
VDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8170
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_server_2016:1709:*:*:*:*:*:*:*

EPSS

Процентиль: 69%

0.00626

Низкий

7 High

CVSS3

4.4 Medium

CVSS2

Дефекты

CWE-404

Связанные уязвимости

CVE-2018-8170

CVSS3: 7

msrc

около 7 лет назад

Windows Image Elevation of Privilege Vulnerability

GHSA-vp3j-rf6v-5ggq

CVSS3: 7

github

около 3 лет назад

EPSS

Процентиль: 69%

0.00626

Низкий

7 High

CVSS3

4.4 Medium

CVSS2

Дефекты

CWE-404