7.8

CVE-2018-0877

Exploit

EPSS 7.15%
Published 14.03.2018 17:29:01
Last modified 21.11.2024 03:39:08
Source secure@microsoft.com
Teams watchlist Login
Open Login

The Desktop Bridge Virtual File System (VFS) in Windows 10 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to how file paths are managed, aka "Windows Desktop Bridge VFS Elevation of Privilege Vulnerability".

Affected products Warnungen 0 Metrics 3 CWE 0 References 7

Data is provided by the National Vulnerability Database (NVD)

Microsoft ≫ Windows 10 Version1607

Microsoft ≫ Windows 10 Version1703

Microsoft ≫ Windows 10 Version1709

Microsoft ≫ Windows Server Version1709

Microsoft ≫ Windows Server 2016 Version-

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	7.15%	0.911

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	7.8	1.8	5.9	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov	7.2	3.9	10	AV:L/AC:L/Au:N/C:C/I:C/A:C

http://www.securitytracker.com/id/1040520

Third Party Advisory

VDB Entry

http://www.securityfocus.com/bid/103227

Third Party Advisory

VDB Entry

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0877

Patch

Vendor Advisory

https://www.exploit-db.com/exploits/44313/

Third Party Advisory

Exploit

VDB Entry

https://nvd.nist.gov/vuln/detail/CVE-2018-0877

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2018-0877

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2018-0877

EUVD