CVE-2018-8224 : An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka "

An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka "Windows Kernel Elevation of Privilege Vulnerability." This affects Windows Server 2008, Windows 7, Windows Server 2008 R2.

Published 2018-06-14 12:29:02

Updated 2020-09-28 12:58:11

Source Microsoft Corporation

View at NVD, CVE.org

Vulnerability category: Gain privilege

Exploit prediction scoring system (EPSS) score for CVE-2018-8224

EPSS FAQ

0.09%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 38 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2018-8224

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
6.9	MEDIUM	AV:L/AC:M/Au:N/C:C/I:C/A:C	3.4	10.0	NIST
Access Vector: Local Access Complexity: Medium Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete
7.0	HIGH	CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H	1.0	5.9	NIST
Attack Vector: Local Attack Complexity: High Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

References for CVE-2018-8224

http://www.securityfocus.com/bid/104381

Microsoft Windows Kernel CVE-2018-8224 Local Privilege Escalation Vulnerability
Third Party Advisory;VDB Entry
http://www.securitytracker.com/id/1041093

Windows Kernel Multiple Flaws Let Local Users Gain Elevated Privileges - SecurityTracker
Third Party Advisory;VDB Entry

CVEs referencing this url
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8224

CVE-2018-8224 | Windows Kernel Elevation of Privilege Vulnerability
Patch;Vendor Advisory

Products affected by CVE-2018-8224

Microsoft » Windows Server 2008 » Version: N/A Update SP2 Itanium Edition
cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*
Matching versions
Microsoft » Windows Server 2008 » Version: R2 Update SP1
cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*
Matching versions
Microsoft » Windows Server 2008 » Version: N/A Update SP2
cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*
Matching versions
Microsoft » Windows 7 » Version: N/A Update SP1
cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*
Matching versions

Vulnerability Details : CVE-2018-8224

Exploit prediction scoring system (EPSS) score for CVE-2018-8224

CVSS scores for CVE-2018-8224

CWE ids for CVE-2018-8224

References for CVE-2018-8224

Products affected by CVE-2018-8224