{"id":"CVE-2018-8471","aliases":["EUVD-2018-20101","GHSA-j68m-gc9c-h89h"],"status":"published","title":"An elevation of privilege vulnerability exists in the way that the Microsoft RemoteFX Virtual GPU...","description":"An elevation of privilege vulnerability exists in the way that the Microsoft RemoteFX Virtual GPU miniport driver handles objects in memory, aka \"Microsoft RemoteFX Virtual GPU miniport driver Elevation of Privilege Vulnerability.\" This affects Windows Server 2016, Windows 10, Windows 8.1, Windows 7, Windows Server 2019.","severity":{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01193,"percentile":0.68239,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-404"],"published":"2018-11-14T01:00:00Z","modified":"2026-06-17T02:04:56Z","products":[{"vendor":"microsoft","product":"windows 10"},{"vendor":"microsoft","product":"windows 7"},{"vendor":"microsoft","product":"windows 8.1"},{"vendor":"microsoft","product":"windows server 2016"},{"vendor":"microsoft","product":"windows server 2019"},{"vendor":"microsoft","product":"windows_10"},{"vendor":"microsoft","product":"windows_7"},{"vendor":"microsoft","product":"windows_8.1"},{"vendor":"microsoft","product":"windows_server_2016"},{"vendor":"microsoft","product":"windows_server_2019"}],"references":[{"url":"http://www.securitytracker.com/id/1042121","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/105800","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8471","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-8471"},{"url":"https://github.com/advisories/GHSA-j68m-gc9c-h89h"}],"sources":{"cve":[{"id":"CVE-2018-8471","description":"An elevation of privilege vulnerability exists in the way that the Microsoft RemoteFX Virtual GPU miniport driver handles objects in memory, aka \"Microsoft RemoteFX Virtual GPU miniport driver Elevation of Privilege Vulnerability.\" This affects Windows Server 2016, Windows 10, Windows 8.1, Windows 7, Windows Server 2019.","status":"published","published":"2018-11-14T01:00:00Z","modified":"2024-08-05T06:54:36.418Z","updated_at":"2026-11-02T14:35:04.172099Z"}],"euvd":[{"id":"EUVD-2018-20101","description":"An elevation of privilege vulnerability exists in the way that the Microsoft RemoteFX Virtual GPU miniport driver handles objects in memory, aka \"Microsoft RemoteFX Virtual GPU miniport driver Elevation of Privilege Vulnerability.\" This affects Windows Server 2016, Windows 10, Windows 8.1, Windows 7, Windows Server 2019.","status":"published","published":"2018-11-14T01:00:00Z","modified":"2024-08-05T06:54:36Z","updated_at":"2026-11-03T02:40:02.600498Z"}],"ghsa":[{"id":"GHSA-j68m-gc9c-h89h","title":"An elevation of privilege vulnerability exists in the way that the Microsoft RemoteFX Virtual GPU...","description":"An elevation of privilege vulnerability exists in the way that the Microsoft RemoteFX Virtual GPU miniport driver handles objects in memory, aka \"Microsoft RemoteFX Virtual GPU miniport driver Elevation of Privilege Vulnerability.\" This affects Windows Server 2016, Windows 10, Windows 8.1, Windows 7, Windows Server 2019.","status":"published","published":"2022-05-13T01:53:44Z","modified":"2023-02-02T05:02:27Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-404"],"updated_at":"2026-11-02T14:51:26.673587Z"}],"nvd":[{"id":"CVE-2018-8471","description":"An elevation of privilege vulnerability exists in the way that the Microsoft RemoteFX Virtual GPU miniport driver handles objects in memory, aka \"Microsoft RemoteFX Virtual GPU miniport driver Elevation of Privilege Vulnerability.\" This affects Windows Server 2016, Windows 10, Windows 8.1, Windows 7, Windows Server 2019.","status":"published","published":"2018-11-14T01:29:00.583Z","modified":"2026-06-17T02:04:56.823Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-404"],"updated_at":"2026-11-02T14:04:47.196456Z"}]}}