CVE-2018-0744

The Windows kernel in Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way objects are handled in memory, aka "Windows Elevation of Privilege Vulnerability".

Published: Jan 4, 2018
Updated: Apr 13, 2023
CVE: CVE-2018-0744
Severity: High
Exploit:

CVSS v3:

Severity: High
Score: 7
AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v2:

Severity: Low
Score: 4.4
AV:L/AC:M/Au:N/C:P/I:P/A:P

No CWE or OWASP classifications available.

Affected Software
References

Software	From	Fixed in
microsoft / windows_rt_8.1	-	-
microsoft / windows_server_2012	r2	r2.x
microsoft / windows_10	1511	1511.x
microsoft / windows_10	1607	1607.x
microsoft / windows_8.1	-	-
microsoft / windows_10	1703	1703.x
microsoft / windows_10	1709	1709.x
microsoft / windows_server_2016	1709	1709.x

http://www.securityfocus.com/bid/102351
http://www.securitytracker.com/id/1040090
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0744
https://www.exploit-db.com/exploits/43446/

Vulnerability Database

289,599

CVE-2018-0744