CVE Vulnerabilities

CVE-2018-8140

Published: Jun 14, 2018 | Modified: Oct 03, 2019
CVSS 3.x
6.8
MEDIUM
Source:
NVD
CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
4.6 MEDIUM
AV:L/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

An Elevation of Privilege vulnerability exists when Cortana retrieves data from user input services without consideration for status, aka Cortana Elevation of Privilege Vulnerability. This affects Windows 10 Servers, Windows 10.

Affected Software

Name Vendor Start Version End Version
Windows_10 Microsoft 1709 (including) 1709 (including)
Windows_10 Microsoft 1803 (including) 1803 (including)
Windows_server_1803 Microsoft - (including) - (including)
Windows_server_2016 Microsoft 1709 (including) 1709 (including)

References