CVE-2018-8140

EPSS 1.6%◆ VulnCheck KEV

Vexday Risk Score

25Low

SSVC decision (CISA)

Attend

PoC available → attend closely

CVSS —EPSS 1.6%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

14 Jun 2018Published on NVD

Recommendation: Plan a near-term fix — a public PoC already exists.

An Elevation of Privilege vulnerability exists when Cortana retrieves data from user input services without consideration for status, aka "Cortana Elevation of Privilege Vulnerability." This affects Windows 10 Servers, Windows 10.

Affected products

Microsoft · Windows 10 Microsoft · Windows 10 Servers

References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8140 http://www.securityfocus.com/bid/104354 http://www.securitytracker.com/id/1041108