Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2018-1038
HistoryApr 02, 2018 - 1:29 p.m.

CVE-2018-1038

2018-04-0213:29:00
NVD-CWE-noinfo
[email protected]
web.nvd.nist.gov
66
In Wild
3
cve-2018-1038
windows
kernel
elevation of privilege
vulnerability
windows 7
windows server 2008 r2
nvd

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.971 High

EPSS

Percentile

99.8%

JSON

The Windows kernel in Windows 7 SP1 and Windows Server 2008 R2 SP1 allows an elevation of privilege vulnerability due to the way it handles objects in memory, aka “Windows Kernel Elevation of Privilege Vulnerability.”

VendorProductVersionCPE
microsoftwindows*cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*

Social References

More

Related

prion 1
qualysblog 2
mskb 9
cisa 1
threatpost 2
zdt 1
kaspersky 1
mscve 1
cert 1
nessus 1
thn 1
openvas 2
googleprojectzero 1
prion
prion
Privilege escalation
2018-04-02 13:29:00
qualysblog
qualysblog
A “Patch for the Meltdown Patch” released out of band Thursday night
2018-03-30 19:05:27
Microsoft Misfires with Meltdown Patch, while WannaCry Pops Up at Boeing
2018-04-02 18:02:51
mskb
mskb
Windows kernel update for CVE-2018-1038
2018-03-29 07:00:00
January 3, 2018—KB4056897 (Security-only update)
2018-01-03 08:00:00
January 4, 2018—KB4056894 (Monthly Rollup)
2018-01-03 08:00:00
cisa
cisa
Microsoft Release Patch for Windows 7 and Windows Server 2008 R2 Systems
2018-03-29 00:00:00
threatpost
threatpost
Microsoft Fixes Bad Patch That Left Win7, Server 2008 Open to Attack
2018-03-30 18:51:48
Microsoft Fixes 66 Bugs in April Patch Tuesday Release
2018-04-10 21:16:16
zdt
zdt
Windows - Local Privilege Escalation Exploit
2018-05-03 00:00:00
kaspersky
kaspersky
KLA11219 PE vulnerability in Microsoft Products (ESU)
2018-03-29 00:00:00
mscve
mscve
Windows Kernel Elevation of Privilege Vulnerability
2018-03-29 07:00:00
cert
cert
Windows 7 and Windows Server 2008 R2 x64 fail to protect kernel memory when the Microsoft update for meltdown is installed
2018-03-29 00:00:00
nessus
nessus
KB4100480: Windows Kernel Elevation of Privilege Vulnerability
2018-03-30 00:00:00
thn
thn
Microsoft's Meltdown Patch Made Windows 7 PCs More Insecure
2018-03-29 14:36:00
openvas
openvas
Microsoft Windows Kernel Elevation of Privilege Vulnerability (KB4100480)
2018-03-30 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB4467107)
2018-11-14 00:00:00
googleprojectzero
googleprojectzero
Taking a page from the kernel's book: A TLB issue in mremap()
2019-01-17 00:00:00

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.971 High

EPSS

Percentile

99.8%

JSON
Related for CVE-2018-1038
prion1qualysblog2mskb9cisa1threatpost2zdt1kaspersky1mscve1cert1nessus1thn1openvas2googleprojectzero1