7.0high
CVE-2018-08261 exploit
Windows Storage Services in Windows 10 versions 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an e…
Published 8 y ago · modified 4 mo ago · JSON
CVSS
7.0
v3.0 · NVD
CISA KEV
No
not known exploited
EPSS
3.1%
percentile 88%
Public exploits
1
Exploit-DB
Summary
Windows Storage Services in Windows 10 versions 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way objects are handled in memory, aka "Windows Storage Services Elevation of Privilege Vulnerability".
Exploit prediction (EPSS)
3.10% probability of exploitation in the next 30 days, higher than 88% of all scored CVEs.
Exploits and detections
- EDB-44152 Microsoft Windows - StorSvc SvcMoveFileInheritSecurity Arbitrary File Creation Privilege Escalation · local · 2018-02-20
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 3.0 | 7.0 | CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H |
| NVD | 2.0 | 4.4 | AV:L/AC:M/Au:N/C:P/I:P/A:P |
Affected products
- Microsoft Corporation Windows Storage Services
References
- exploit-db.com /exploits/44152/ · exploit, x_refsource_EXPLOIT-DB, x_transferred
- securityfocus.com /bid/102944 · vdb-entry, x_refsource_BID, x_transferred
- securitytracker.com /id/1040379 · vdb-entry, x_refsource_SECTRACK, x_transferred
- portal.msrc.microsoft.com /en-US/security-guidance/advisory/CVE-2018-0826 · x_refsource_CONFIRM, x_transferred
Sources
- CVE List: CVE-2018-0826
- NVD: CVE-2018-0826
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.