CVE-2018-0877
First published: Wed Mar 14 2018(Updated: )
The Desktop Bridge Virtual File System (VFS) in Windows 10 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to how file paths are managed, aka "Windows Desktop Bridge VFS Elevation of Privilege Vulnerability".
Credit: secure@microsoft.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Microsoft Windows 10 | =1607 | |
| Microsoft Windows 10 | =1703 | |
| Microsoft Windows 10 | =1709 | |
| Microsoft Windows Server | =1709 | |
| Microsoft Windows Server 2016 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2018-0877?
CVE-2018-0877 has been classified as a critical elevation of privilege vulnerability.
How do I fix CVE-2018-0877?
To mitigate CVE-2018-0877, ensure you install the latest Microsoft security updates and patches.
What versions of Windows are affected by CVE-2018-0877?
CVE-2018-0877 affects Windows 10 versions 1607, 1703, 1709, and Windows Server 2016 and 1709.
Can CVE-2018-0877 allow unauthorized access?
Yes, CVE-2018-0877 can allow an attacker to gain elevated privileges and potentially access restricted system resources.
Is there a workaround for CVE-2018-0877?
Currently, the most effective solution for CVE-2018-0877 is to apply the recommended Microsoft updates and patches.
- agent/references
- agent/type
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/author
- agent/remedy
- agent/severity
- agent/softwarecombine
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/tags
- agent/first-publish-date
- agent/event
- agent/source
- vendor/microsoft
- canonical/microsoft windows 10
- version/microsoft windows 10/1607
- version/microsoft windows 10/1703
- version/microsoft windows 10/1709
- canonical/microsoft windows server
- version/microsoft windows server/1709
- canonical/microsoft windows server 2016