Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2018-1038
HistoryApr 02, 2018 - 1:29 p.m.

CVE-2018-1038

2018-04-0213:29:00
[email protected]
web.nvd.nist.gov
7

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.971

Percentile

99.8%

JSON

The Windows kernel in Windows 7 SP1 and Windows Server 2008 R2 SP1 allows an elevation of privilege vulnerability due to the way it handles objects in memory, aka “Windows Kernel Elevation of Privilege Vulnerability.”

Affected configurations

Nvd
Node
microsoftwindows_7Match-sp1x64
OR
microsoftwindows_server_2008Matchr2sp1x64
VendorProductVersionCPE
microsoftwindows_7-cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:x64:*
microsoftwindows_server_2008r2cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*

Related

prion 1
qualysblog 2
mskb 9
cisa 1
threatpost 2
exploitdb 1
cert 1
kaspersky 1
mscve 1
zdt 1
thn 1
nessus 1
openvas 2
cvelist 1
cve 1
googleprojectzero 1
prion
prion
Privilege escalation
2018-04-02 13:29:00
qualysblog
qualysblog
A “Patch for the Meltdown Patch” released out of band Thursday night
2018-03-30 19:05:27
Microsoft Misfires with Meltdown Patch, while WannaCry Pops Up at Boeing
2018-04-02 18:02:51
mskb
mskb
Windows kernel update for CVE-2018-1038
2018-03-29 07:00:00
January 3, 2018—KB4056897 (Security-only update)
2018-01-03 08:00:00
January 4, 2018—KB4056894 (Monthly Rollup)
2018-01-03 08:00:00
cisa
cisa
Microsoft Release Patch for Windows 7 and Windows Server 2008 R2 Systems
2018-03-29 00:00:00
threatpost
threatpost
Microsoft Fixes Bad Patch That Left Win7, Server 2008 Open to Attack
2018-03-30 18:51:48
Microsoft Fixes 66 Bugs in April Patch Tuesday Release
2018-04-10 21:16:16
exploitdb
exploitdb
Microsoft Windows - Local Privilege Escalation
2018-04-24 00:00:00
cert
cert
Windows 7 and Windows Server 2008 R2 x64 fail to protect kernel memory when the Microsoft update for meltdown is installed
2018-03-29 00:00:00
kaspersky
kaspersky
KLA11219 PE vulnerability in Microsoft Products (ESU)
2018-03-29 00:00:00
mscve
mscve
Windows Kernel Elevation of Privilege Vulnerability
2018-03-29 07:00:00
zdt
zdt
Windows - Local Privilege Escalation Exploit
2018-05-03 00:00:00
thn
thn
Microsoft's Meltdown Patch Made Windows 7 PCs More Insecure
2018-03-29 14:36:00
nessus
nessus
KB4100480: Windows Kernel Elevation of Privilege Vulnerability
2018-03-30 00:00:00
openvas
openvas
Microsoft Windows Kernel Elevation of Privilege Vulnerability (KB4100480)
2018-03-30 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB4467107)
2018-11-14 00:00:00
cvelist
cvelist
CVE-2018-1038
2018-04-02 13:00:00
cve
cve
CVE-2018-1038
2018-04-02 13:29:00
googleprojectzero
googleprojectzero
Taking a page from the kernel's book: A TLB issue in mremap()
2019-01-17 00:00:00

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.971

Percentile

99.8%

JSON
Related for NVD:CVE-2018-1038
prion1qualysblog2mskb9cisa1threatpost2exploitdb1cert1kaspersky1mscve1zdt1thn1nessus1openvas2cvelist1cve1googleprojectzero1