CVE-2018-8134

An elevation of privilege vulnerability exists in the way that the Windows Kernel API enforces permissions, aka "Windows Elevation of Privilege Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2016, Windows 8.1, Windows 10, Windows 10 Servers.

Published: May 9, 2018
Updated: Apr 13, 2023
CVE: CVE-2018-8134
Severity: High
Exploit:

CVSS v3:

Severity: High
Score: 7
AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v2:

Severity: Medium
Score: 6.9
AV:L/AC:M/Au:N/C:C/I:C/A:C

No CWE or OWASP classifications available.

Affected Software
References

Software	From	Fixed in
microsoft / windows_rt_8.1	-	-
microsoft / windows_server_2012	r2	r2.x
microsoft / windows_server_2016	-	-
microsoft / windows_7	-	-
microsoft / windows_10	1607	1607.x
microsoft / windows_8.1	-	-
microsoft / windows_10	1703	1703.x
microsoft / windows_10	1709	1709.x
microsoft / windows_server_2016	1709	1709.x
microsoft / windows_10	1803	1803.x
microsoft / windows_server_2016	1803	1803.x

http://www.securityfocus.com/bid/104041
http://www.securitytracker.com/id/1040849
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8134
https://www.exploit-db.com/exploits/44630/

Vulnerability Database

289,599

CVE-2018-8134