CVE-2018-0877: High severity Microsoft Windows 10 vulnerability

Published Mar 14, 2018

Updated

The Desktop Bridge Virtual File System (VFS) in Windows 10 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to how file paths are managed, aka "Windows Desktop Bridge VFS Elevation of Privilege Vulnerability".

Affected Software

5 affected components

Microsoft Windows 10=1607

Microsoft Windows 10=1703

Microsoft Windows 10=1709

Microsoft Windows Server=1709

Microsoft Windows Server 2016

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0877

Event History

Mar 14, 2018

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2018-0877?

CVE-2018-0877 has been classified as a critical elevation of privilege vulnerability.

How do I fix CVE-2018-0877?

To mitigate CVE-2018-0877, ensure you install the latest Microsoft security updates and patches.

What versions of Windows are affected by CVE-2018-0877?

CVE-2018-0877 affects Windows 10 versions 1607, 1703, 1709, and Windows Server 2016 and 1709.

Can CVE-2018-0877 allow unauthorized access?

Yes, CVE-2018-0877 can allow an attacker to gain elevated privileges and potentially access restricted system resources.

Is there a workaround for CVE-2018-0877?

Currently, the most effective solution for CVE-2018-0877 is to apply the recommended Microsoft updates and patches.