CVE-2018-8140

CVE Database · CVE-2018-8140

CVE-2018-8140

· N/AModified

CVSS v3.1

N/A

EPSS

1.64%

Published

Jun 14, 2018

Modified

Nov 21, 2024

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

An Elevation of Privilege vulnerability exists when Cortana retrieves data from user input services without consideration for status, aka "Cortana Elevation of Privilege Vulnerability." This affects Windows 10 Servers, Windows 10.

Affected Products (4)

microsoft · windows_10vulnerable

microsoft · windows_server_1803vulnerable

microsoft · windows_server_2016vulnerable

References (6)

http://www.securityfocus.com/bid/104354

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1041108

Third Party AdvisoryVDB Entry

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8140

PatchVendor Advisory

http://www.securityfocus.com/bid/104354

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1041108

Third Party AdvisoryVDB Entry

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8140

KEV Catalog EPSS Scores Vendors All CVEs