CVE-2018-8314: Medium severity Microsoft Windows 10 vulnerability

Published Jul 11, 2018

Updated

An elevation of privilege vulnerability exists when Windows fails a check, allowing a sandbox escape, aka "Windows Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2008 R2, Windows 10. This CVE ID is unique from CVE-2018-8313.

Affected Software

11 affected components

Microsoft Windows 10

Microsoft Windows 7=sp1

Microsoft Windows 8.1

Microsoft Windows RT 8.1

Microsoft Windows Server 2008=sp2

Microsoft Windows Server 2008=r2

Microsoft Windows Server 2008=r2-sp1

Microsoft Windows Server 2012

Microsoft Windows Server 2012=r2

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8314

Event History

Jul 11, 2018

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionWeakness

Data Sourced

via NVD·12:29 AM

RemedyDescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of CVE-2018-8314?

CVE-2018-8314 has a severity rating of important as it allows elevation of privilege in affected versions of Windows.

How do I fix CVE-2018-8314?

To mitigate CVE-2018-8314, users should apply the security updates provided by Microsoft.

Which Windows versions are affected by CVE-2018-8314?

CVE-2018-8314 affects Windows 7, Windows 8.1, Windows 10, Windows Server 2008, Windows Server 2012, and Windows Server 2012 R2 among others.

What type of vulnerability is CVE-2018-8314?

CVE-2018-8314 is classified as an elevation of privilege vulnerability.

Can CVE-2018-8314 lead to a sandbox escape?

Yes, CVE-2018-8314 allows for a sandbox escape due to improper validation by Windows.