{"id":"CVE-2018-0977","aliases":["EUVD-2018-1756","GHSA-89rh-7989-4j75"],"status":"published","title":"The Windows kernel mode driver in Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server...","description":"The Windows kernel mode driver in Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to how objects are handled in memory, aka \"Win32k Elevation of Privilege Vulnerability\".","severity":{"version":"3.0","score":7,"vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01108,"percentile":0.66082,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2018-03-14T17:00:00Z","modified":"2026-06-17T01:32:07Z","products":[{"vendor":"microsoft","product":"windows"},{"vendor":"microsoft","product":"windows_10"},{"vendor":"microsoft","product":"windows_server_2016"},{"vendor":"microsoft corporation","product":"windows"}],"references":[{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0977","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1040520","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/103380","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-0977"},{"url":"https://github.com/advisories/GHSA-89rh-7989-4j75"}],"sources":{"cve":[{"id":"CVE-2018-0977","description":"The Windows kernel mode driver in Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to how objects are handled in memory, aka \"Win32k Elevation of Privilege Vulnerability\".","status":"published","published":"2018-03-14T17:00:00Z","modified":"2024-09-17T02:21:25.445Z","updated_at":"2026-11-02T14:35:12.596526Z"}],"euvd":[{"id":"EUVD-2018-1756","description":"The Windows kernel mode driver in Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to how objects are handled in memory, aka \"Win32k Elevation of Privilege Vulnerability\".","status":"published","published":"2018-03-14T17:00:00Z","modified":"2024-09-17T02:21:25Z","updated_at":"2026-11-03T00:28:40.896027Z"}],"ghsa":[{"id":"GHSA-89rh-7989-4j75","title":"The Windows kernel mode driver in Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server...","description":"The Windows kernel mode driver in Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to how objects are handled in memory, aka \"Win32k Elevation of Privilege Vulnerability\".","status":"published","published":"2022-05-13T01:48:29Z","modified":"2023-02-02T05:01:46Z","cvss":[{"version":"3.0","score":7,"vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T14:51:15.657685Z"}],"nvd":[{"id":"CVE-2018-0977","description":"The Windows kernel mode driver in Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to how objects are handled in memory, aka \"Win32k Elevation of Privilege Vulnerability\".","status":"published","published":"2018-03-14T17:29:04.09Z","modified":"2026-06-17T01:32:07.9Z","cvss":[{"version":"3.0","score":7,"vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.9,"vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:04:24.264003Z"}]}}