{"id":"CVE-2018-8224","aliases":["EUVD-2018-19893","GHSA-m9qj-vfxm-2p5x"],"status":"published","title":"An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle...","description":"An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka \"Windows Kernel Elevation of Privilege Vulnerability.\" This affects Windows Server 2008, Windows 7, Windows Server 2008 R2.","severity":{"version":"3.0","score":7,"vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01199,"percentile":0.68365,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-404"],"published":"2018-06-14T12:00:00Z","modified":"2026-06-17T02:04:27Z","products":[{"vendor":"microsoft","product":"windows 7"},{"vendor":"microsoft","product":"windows server 2008"},{"vendor":"microsoft","product":"windows server 2008 r2"},{"vendor":"microsoft","product":"windows_7"},{"vendor":"microsoft","product":"windows_server_2008"}],"references":[{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8224","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/104381","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1041093","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-8224"},{"url":"https://github.com/advisories/GHSA-m9qj-vfxm-2p5x"}],"sources":{"cve":[{"id":"CVE-2018-8224","description":"An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka \"Windows Kernel Elevation of Privilege Vulnerability.\" This affects Windows Server 2008, Windows 7, Windows Server 2008 R2.","status":"published","published":"2018-06-14T12:00:00Z","modified":"2024-08-05T06:46:13.97Z","updated_at":"2026-11-02T14:35:04.172099Z"}],"euvd":[{"id":"EUVD-2018-19893","description":"An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka \"Windows Kernel Elevation of Privilege Vulnerability.\" This affects Windows Server 2008, Windows 7, Windows Server 2008 R2.","status":"published","published":"2018-06-14T12:00:00Z","modified":"2024-08-05T06:46:13Z","updated_at":"2026-11-03T02:40:03.749866Z"}],"ghsa":[{"id":"GHSA-m9qj-vfxm-2p5x","title":"An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle...","description":"An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka \"Windows Kernel Elevation of Privilege Vulnerability.\" This affects Windows Server 2008, Windows 7, Windows Server 2008 R2.","status":"published","published":"2022-05-13T01:16:03Z","modified":"2023-02-01T05:04:47Z","cvss":[{"version":"3.0","score":7,"vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-404"],"updated_at":"2026-11-02T14:50:11.446996Z"}],"nvd":[{"id":"CVE-2018-8224","description":"An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka \"Windows Kernel Elevation of Privilege Vulnerability.\" This affects Windows Server 2008, Windows 7, Windows Server 2008 R2.","status":"published","published":"2018-06-14T12:29:01.68Z","modified":"2026-06-17T02:04:27.937Z","cvss":[{"version":"3.0","score":7,"vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.9,"vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","level":"medium","assessor":"primary"}],"cwes":["CWE-404"],"updated_at":"2026-11-02T14:04:29.837913Z"}]}}