Privilege escalation

The Windows kernel in Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way objects are handled in memory, aka "Windows Kernel Elevation of Privilege Vulnerability". This CVE is unique from...

CVE-2018-0859

Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0834,...

EUVD-2018-1579

Microsoft Edge in Microsoft Windows 10 1607, 1703, and Windows Server 2016 allows a security feature bypass, due to how Edge handles different-origin requests, aka "Microsoft Edge Security Feature Bypass"...

CVE-2018-0809

CVE-2018-0809 affects the Windows kernel on Windows 10 (versions 1703 and 1709) and Windows Server 1709. It is an elevation of privilege vulnerability caused by the kernel’s handling of objects in memory. A local attacker could exploit this to execute code in kernel mode with elevated privileges....

CVE-2018-0843

Technical details for CVE-2018-0843 are not publicly available in the provided documents; monitor for updates.

CVE-2018-0834

Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0835,...

CVE-2018-0755

The Microsoft Windows Embedded OpenType EOT font engine in Microsoft Windows 7 SP1 and Windows Server 2008 R2 allows information disclosure, due to how the Windows EOT font engine handles embedded fonts, aka "Windows EOT Font Engine Information Disclosure Vulnerability". This CVE ID is unique fro...

CVE-2018-0822

CVE-2018-0822 is an elevation-of-privilege vulnerability in NTFS on Windows 10 (Gold, 1511, 1607, 1703, 1709) and Windows Server 2016/1709, caused by how NTFS handles objects (Global Reparse Point). Impact: local privilege escalation with high severity (per CVSS v3). Public exploit exists (exploi...

CVE-2018-0821

AppContainer in Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way constrained impersonations are handled, aka "Windows AppContainer Elevation Of Privilege Vulnerability"...

CVE-2018-0828

CVE-2018-0828 is a Windows elevation-of-privilege vulnerability affecting Windows 10 (version 1607) and Windows Server 2016. The root cause is improper protection of the MultiPoint management account password, allowing a local attacker who logs in to run a specially crafted application to execute...

CVE-2018-0809

The Windows kernel in Windows 10, versions 1703 and 1709, and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way objects are handled in memory, aka "Windows Elevation of Privilege Vulnerability". This CVE is unique from CVE-2018-0742, CVE-2018-0756,...

CVE-2018-0842

CVE-2018-0842 : Windows kernel elevation-of-privilege vulnerability affecting multiple Windows client and server editions (Windows 7 SP1, Windows 8.1/RT 8.1, Windows Server 2008 SP2/R2 SP1, 2012/R2, 2016, 1703–1709 and 1709 variants, Windows 10 releases). The issue arises from how memory objects ...

CVE-2018-0838

Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0834,...

CVE-2018-0857

ChakraCore/Edge memory-corruption RCE chain is described in the connected advisories: ChakraCore on Microsoft Edge and ChakraCore components within Windows 10 (various builds) is vulnerable when the scripting engine mishandles in-memory objects, enabling remote code execution. The exact affected ...

CVE-2018-0756

CVE-2018-0756 affects the Windows kernel in Windows 10 (Gold, 1511, 1607, 1703, 1709) and Windows Server 2016/Server 1709, due to how objects are handled in memory, enabling local elevation of privilege. The connected documents do not provide additional concrete technical details (affected compon...

CVE-2018-0771

Microsoft Edge in Microsoft Windows 10 1607, 1703, and Windows Server 2016 allows a security feature bypass, due to how Edge handles different-origin requests, aka "Microsoft Edge Security Feature Bypass"...

CVE-2018-0826

Windows Storage Services in Windows 10 versions 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way objects are handled in memory, aka "Windows Storage Services Elevation of Privilege Vulnerability"...

CVE-2018-0822

NTFS in Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way NTFS handles objects, aka "Windows NTFS Global Reparse Point Elevation of Privilege Vulnerability"...

CVE-2018-0821

CVE-2018-0821 is a local elevation-of-privilege vulnerability in Windows AppContainer affecting Windows 10 (Gold, 1511, 1607, 1703, 1709) and Windows Server (2016 and 1709) where constrained impersonations are mishandled. The root cause is how AppContainer constrains impersonations, enabling a lo...

CVE-2018-0859

The CVE-2018-0859 entry concerns a remote code execution vulnerability in Microsoft Edge and ChakraCore on Windows 10 (Gold, 1511, 1607, 1703, 1709) and Windows Server 2016, caused by how the scripting engine handles objects in memory (Scripting Engine Memory Corruption). Connected advisories (GH...