{"id":"CVE-2018-8170","aliases":["EUVD-2018-19841","GHSA-vp3j-rf6v-5ggq"],"status":"published","title":"An elevation of privilege vulnerability exists in the way that the Windows kernel image handles...","description":"An elevation of privilege vulnerability exists in the way that the Windows kernel image handles objects in memory, aka \"Windows Image Elevation of Privilege Vulnerability.\" This affects Windows 10, Windows 10 Servers.","severity":{"version":"3.0","score":7,"vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01002,"percentile":0.63119,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-404"],"published":"2018-05-09T19:00:00Z","modified":"2026-06-17T02:04:23Z","products":[{"vendor":"microsoft","product":"windows 10"},{"vendor":"microsoft","product":"windows 10 servers"},{"vendor":"microsoft","product":"windows_10"},{"vendor":"microsoft","product":"windows_server_2016"}],"references":[{"url":"http://www.securitytracker.com/id/1040849","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8170","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/104068","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-8170"},{"url":"https://github.com/advisories/GHSA-vp3j-rf6v-5ggq"}],"sources":{"cve":[{"id":"CVE-2018-8170","description":"An elevation of privilege vulnerability exists in the way that the Windows kernel image handles objects in memory, aka \"Windows Image Elevation of Privilege Vulnerability.\" This affects Windows 10, Windows 10 Servers.","status":"published","published":"2018-05-09T19:00:00Z","modified":"2024-08-05T06:46:13.37Z","updated_at":"2026-11-02T14:35:04.172099Z"}],"euvd":[{"id":"EUVD-2018-19841","description":"An elevation of privilege vulnerability exists in the way that the Windows kernel image handles objects in memory, aka \"Windows Image Elevation of Privilege Vulnerability.\" This affects Windows 10, Windows 10 Servers.","status":"published","published":"2018-05-09T19:00:00Z","modified":"2024-08-05T06:46:13Z","updated_at":"2026-11-03T02:40:03.749866Z"}],"ghsa":[{"id":"GHSA-vp3j-rf6v-5ggq","title":"An elevation of privilege vulnerability exists in the way that the Windows kernel image handles...","description":"An elevation of privilege vulnerability exists in the way that the Windows kernel image handles objects in memory, aka \"Windows Image Elevation of Privilege Vulnerability.\" This affects Windows 10, Windows 10 Servers.","status":"published","published":"2022-05-13T01:53:34Z","modified":"2023-02-02T05:02:22Z","cvss":[{"version":"3.0","score":7,"vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-404"],"updated_at":"2026-11-02T14:51:25.546182Z"}],"nvd":[{"id":"CVE-2018-8170","description":"An elevation of privilege vulnerability exists in the way that the Windows kernel image handles objects in memory, aka \"Windows Image Elevation of Privilege Vulnerability.\" This affects Windows 10, Windows 10 Servers.","status":"published","published":"2018-05-09T19:29:02.823Z","modified":"2026-06-17T02:04:23.723Z","cvss":[{"version":"3.0","score":7,"vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":4.4,"vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-404"],"updated_at":"2026-11-02T14:04:26.098615Z"}]}}