CVE-2018-8214: High severity Microsoft Windows 10 vulnerability
An elevation of privilege vulnerability exists in Windows when Desktop Bridge does not properly manage the virtual registry, aka "Windows Desktop Bridge Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-8208.
Affected Software
Remediation
Event History
Frequently Asked Questions
Who is exposed to this vulnerability?
Systems running the affected Windows products are exposed: Windows 10, Windows Server 2016, and Windows 10 Servers. Exploitation requires local access and a low-privileged account.
What does an attacker need to exploit it?
An attacker must already be able to execute code locally as a low-privileged user. The CVSS vector indicates no user interaction is required, but exploitation has high attack complexity.
What is the impact if exploitation succeeds?
Successful exploitation can elevate privileges and has high potential impact on confidentiality, integrity, and availability.
What should administrators do?
Apply the available vendor patch for CVE-2018-8214. The provided information does not identify a configuration workaround if patching must be delayed.