{"id":"CVE-2018-8329","aliases":["EUVD-2018-19980","GHSA-6xfw-8wgh-qf64"],"status":"published","title":"An Elevation of Privilege vulnerability exists in Windows Subsystem for Linux when it fails to...","description":"An Elevation of Privilege vulnerability exists in Windows Subsystem for Linux when it fails to properly handle objects in memory, aka \"Linux On Windows Elevation Of Privilege Vulnerability.\" This affects Windows 10, Windows 10 Servers.","severity":{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01177,"percentile":0.67806,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-404"],"published":"2018-10-10T13:00:00Z","modified":"2026-06-17T02:04:38Z","products":[{"vendor":"microsoft","product":"windows 10"},{"vendor":"microsoft","product":"windows 10 servers"},{"vendor":"microsoft","product":"windows_10"},{"vendor":"microsoft","product":"windows_server_2016"}],"references":[{"url":"http://www.securityfocus.com/bid/105505","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8329","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-8329"},{"url":"https://github.com/advisories/GHSA-6xfw-8wgh-qf64"}],"sources":{"cve":[{"id":"CVE-2018-8329","description":"An Elevation of Privilege vulnerability exists in Windows Subsystem for Linux when it fails to properly handle objects in memory, aka \"Linux On Windows Elevation Of Privilege Vulnerability.\" This affects Windows 10, Windows 10 Servers.","status":"published","published":"2018-10-10T13:00:00Z","modified":"2024-08-05T06:54:35.31Z","updated_at":"2026-11-02T14:35:04.172099Z"}],"euvd":[{"id":"EUVD-2018-19980","description":"An Elevation of Privilege vulnerability exists in Windows Subsystem for Linux when it fails to properly handle objects in memory, aka \"Linux On Windows Elevation Of Privilege Vulnerability.\" This affects Windows 10, Windows 10 Servers.","status":"published","published":"2018-10-10T13:00:00Z","modified":"2024-08-05T06:54:35Z","updated_at":"2026-11-03T02:40:03.169087Z"}],"ghsa":[{"id":"GHSA-6xfw-8wgh-qf64","title":"An Elevation of Privilege vulnerability exists in Windows Subsystem for Linux when it fails to...","description":"An Elevation of Privilege vulnerability exists in Windows Subsystem for Linux when it fails to properly handle objects in memory, aka \"Linux On Windows Elevation Of Privilege Vulnerability.\" This affects Windows 10, Windows 10 Servers.","status":"published","published":"2022-05-13T01:53:38Z","modified":"2023-02-02T05:02:22Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-404"],"updated_at":"2026-11-02T14:51:25.546182Z"}],"nvd":[{"id":"CVE-2018-8329","description":"An Elevation of Privilege vulnerability exists in Windows Subsystem for Linux when it fails to properly handle objects in memory, aka \"Linux On Windows Elevation Of Privilege Vulnerability.\" This affects Windows 10, Windows 10 Servers.","status":"published","published":"2018-10-10T13:29:01.43Z","modified":"2026-06-17T02:04:38.4Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-404"],"updated_at":"2026-11-02T14:04:44.873741Z"}]}}