CVE-2018-8140

EPSS 1.6%◆ VulnCheck KEV

Vexday Risk Score

25Bajo

Decisión SSVC (CISA)

Attend

PoC disponible → seguir de cerca

CVSS —EPSS 1.6%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

14 jun 2018Publicada en NVD

Recomendación: Planificar corrección próxima — ya existe PoC pública.

An Elevation of Privilege vulnerability exists when Cortana retrieves data from user input services without consideration for status, aka "Cortana Elevation of Privilege Vulnerability." This affects Windows 10 Servers, Windows 10.

Productos afectados

Microsoft · Windows 10 Microsoft · Windows 10 Servers

Referencias

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8140 http://www.securityfocus.com/bid/104354 http://www.securitytracker.com/id/1041108