VULNERABILITY INTELLIGENCE
CVE-2018-8170
CVSS score7 HIGH
EPSS probability1.02%
CISA KEVNot currently listed
Published2018-05-09
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Description
An elevation of privilege vulnerability exists in the way that the Windows kernel image handles objects in memory, aka "Windows Image Elevation of Privilege Vulnerability." This affects Windows 10, Windows 10 Servers.
Weakness classification
- CWE-404: Improper Resource Shutdown or Release
Primary references
- secure@microsoft.com — Third Party Advisory, VDB Entry
- secure@microsoft.com — Third Party Advisory, VDB Entry
- secure@microsoft.com — Patch, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory