7.0high
CVE-2018-08231 exploit
The Named Pipe File System in Windows 10 version 1709 and Windows Server, version 1709 allows an elevation of privilege vulnerability due t…
Published 8 y ago · modified 4 mo ago · JSON
CVSS
7.0
v3.0 · NVD
CISA KEV
No
not known exploited
EPSS
2.6%
percentile 86%
Public exploits
1
Exploit-DB
Summary
The Named Pipe File System in Windows 10 version 1709 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way the Named Pipe File System handles objects, aka "Named Pipe File System Elevation of Privilege Vulnerability".
Exploit prediction (EPSS)
2.63% probability of exploitation in the next 30 days, higher than 86% of all scored CVEs.
Exploits and detections
- EDB-44148 Microsoft Windows - NPFS Symlink Security Feature Bypass/Elevation of Privilege/Dangerous Behavior · local · 2018-02-20
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 3.0 | 7.0 | CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H |
| NVD | 2.0 | 4.4 | AV:L/AC:M/Au:N/C:P/I:P/A:P |
Affected products
- Microsoft Corporation Named Pipe File System
References
- securitytracker.com /id/1040379 · vdb-entry, x_refsource_SECTRACK, x_transferred
- exploit-db.com /exploits/44148/ · exploit, x_refsource_EXPLOIT-DB, x_transferred
- portal.msrc.microsoft.com /en-US/security-guidance/advisory/CVE-2018-0823 · x_refsource_CONFIRM, x_transferred
- securityfocus.com /bid/102919 · vdb-entry, x_refsource_BID, x_transferred
Sources
- CVE List: CVE-2018-0823
- NVD: CVE-2018-0823
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.