CVE-2018-8170: High severity Microsoft Windows 10 vulnerability
Published May 9, 2018
·Updated
An elevation of privilege vulnerability exists in the way that the Windows kernel image handles objects in memory, aka "Windows Image Elevation of Privilege Vulnerability." This affects Windows 10, Windows 10 Servers.
Affected Software
3 affected components
Microsoft Windows 10=1703
Microsoft Windows 10=1709
Microsoft Windows Server 2016=1709
Remediation
Event History
May 9, 2018
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
DescriptionWeakness
Data Sourced
via NVD·07:29 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What level of access does an attacker need to exploit this vulnerability?
An attacker needs local access and low privileges on an affected system. The CVSS vector indicates no user interaction is required.
2
What could successful exploitation allow?
Successful exploitation could allow elevation of privilege and affect confidentiality, integrity, and availability at a high impact level.
3
Which systems are identified as affected?
The affected products listed are Microsoft Windows 10 and Microsoft Windows Server 2016, including Windows 10 Servers.
4
What should organizations do to remediate this issue?
A patch is available. Apply the vendor-provided patch to affected Windows 10 and Windows Server 2016 systems.