Vulners
Lucene search
| Reporter | Title | Published | Views | Family All 44 |
|---|---|---|---|---|
 | Microsoft Windows - NTFS Owner/Mandatory Label Privilege Bypass Exploit | 11 Jan 201800:00 | – | zdt |
 | CVE-2018-0748 | 11 Jan 201800:00 | – | circl |
 | Microsoft Windows Kernel Elevation of Privilege Vulnerability (CNVD-2018-00516) | 5 Jan 201800:00 | – | cnvd |
 | CVE-2018-0748 | 4 Jan 201814:00 | – | cvelist |
 | EUVD-2018-1558 | 4 Jan 201814:00 | – | euvd |
 | Description of the security update for the elevation of privilege vulnerability in Windows Server 2008: January 3, 2018 | 3 Jan 201808:00 | – | mskb |
| January 3, 2018—KB4056888 (OS Build 10586.1356) | 9 Jan 201808:00 | – | mskb |
| January 3, 2018—KB4056890 (OS Build 14393.2007) | 9 Jan 201808:00 | – | mskb |
| January 3, 2018—KB4056891 (OS Build 15063.850) | 9 Jan 201808:00 | – | mskb |
| January 3, 2018—KB4056892 (OS Build 16299.192) | 9 Jan 201808:00 | – | mskb |
10
Node
OROROROROROROROROROROROROR
[
{
"product": "Windows kernel",
"vendor": "Microsoft Corporation",
"versions": [
{
"status": "affected",
"version": "Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709"
}
]
}
]| Source | Link |
|---|---|
| portal | www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0748 |
| 95cnsec | www.95cnsec.com/windows-kernel-cve-2018-0748-exploit.html |
| securityfocus | www.securityfocus.com/bid/102354 |
| securitytracker | www.securitytracker.com/id/1040095 |
| exploit-db | www.exploit-db.com/exploits/43514/ |
| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| Security Descriptor | path | c:\test\test1.txt | NTFS file creation with arbitrary security descriptor enabling Owner/Label manipulation (EoP) via file create path. | CWE-269 |
| Owner | path | c:\test\test1.txt | NTFS file creation with arbitrary security descriptor enabling Owner/Label manipulation (EoP) via file create path. | CWE-269 |
| Security Descriptor | path | \\localhost\c$\test\test2.txt | NTFS file creation with arbitrary security descriptor enabling Owner/Label manipulation (EoP) via SMB/local admin share path. | CWE-269 |
| Owner | path | \\localhost\c$\test\test2.txt | NTFS file creation with arbitrary security descriptor enabling Owner/Label manipulation (EoP) via SMB/local admin share path. | CWE-269 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
17 Jun 2026 01:31Current
5.5Medium risk
Vulners AI Score5.5
CVSS 24.6
CVSS 37.8
EPSS0.02775