Vulnerability Database

296,224

Total vulnerabilities in the database

CVE-2018-8140

An Elevation of Privilege vulnerability exists when Cortana retrieves data from user input services without consideration for status, aka "Cortana Elevation of Privilege Vulnerability." This affects Windows 10 Servers, Windows 10.

  • Published: Jun 14, 2018
  • Updated: Apr 13, 2023
  • CVE: CVE-2018-8140
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 6.8
  • AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2:

  • Severity: Low
  • Score: 4.6
  • AV:L/AC:L/Au:N/C:P/I:P/A:P

No CWE or OWASP classifications available.

Software From Fixed in
microsoft / windows_10 1709 1709.x
microsoft / windows_server_2016 1709 1709.x
microsoft / windows_10 1803 1803.x