4.7 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N
5.8 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.003 Low
EPSS
Percentile
70.3%
An elevation of privilege vulnerability exists when Windows fails a check, allowing a sandbox escape, aka “Windows Elevation of Privilege Vulnerability.” This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2008 R2, Windows 10. This CVE ID is unique from CVE-2018-8313.
Vendor | Product | Version | CPE |
---|---|---|---|
microsoft | windows_7 | 32-bit Systems Service Pack 1 | cpe:2.3:o:microsoft:windows_7:32-bit Systems Service Pack 1:*:*:*:*:*:*:* |
microsoft | windows_7 | x64-based Systems Service Pack 1 | cpe:2.3:o:microsoft:windows_7:x64-based Systems Service Pack 1:*:*:*:*:*:*:* |
microsoft | windows_server_2012_r2 | (Server Core installation) | cpe:2.3:o:microsoft:windows_server_2012_r2:(Server Core installation):*:*:*:*:*:*:* |
microsoft | windows_rt_8.1 | Windows RT 8.1 | cpe:2.3:o:microsoft:windows_rt_8.1:Windows RT 8.1:*:*:*:*:*:*:* |
microsoft | windows_server_2008 | 32-bit Systems Service Pack 2 | cpe:2.3:o:microsoft:windows_server_2008:32-bit Systems Service Pack 2:*:*:*:*:*:*:* |
microsoft | windows_server_2008 | 32-bit Systems Service Pack 2 (Server Core installation) | cpe:2.3:o:microsoft:windows_server_2008:32-bit Systems Service Pack 2 (Server Core installation):*:*:*:*:*:*:* |
microsoft | windows_server_2008 | Itanium-Based Systems Service Pack 2 | cpe:2.3:o:microsoft:windows_server_2008:Itanium-Based Systems Service Pack 2:*:*:*:*:*:*:* |
microsoft | windows_server_2008 | x64-based Systems Service Pack 2 | cpe:2.3:o:microsoft:windows_server_2008:x64-based Systems Service Pack 2:*:*:*:*:*:*:* |
microsoft | windows_server_2008 | x64-based Systems Service Pack 2 (Server Core installation) | cpe:2.3:o:microsoft:windows_server_2008:x64-based Systems Service Pack 2 (Server Core installation):*:*:*:*:*:*:* |
microsoft | windows_server_2012 | (Server Core installation) | cpe:2.3:o:microsoft:windows_server_2012:(Server Core installation):*:*:*:*:*:*:* |
4.7 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N
5.8 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.003 Low
EPSS
Percentile
70.3%