CVE-2018-0977

7.0 highEPSS 1.1%

The Windows kernel mode driver in Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to how objects are handled in memory, aka "Win32k Elevation of Privilege Vulnerability".

Severity

CVSS 3.0

7.0 high

CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.1% chance of exploitation in the next 30 days; higher than 65% of CVEs (scores of 2026-10-31)
Published: 2018-03-14
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

microsoft:windows_10
microsoft:windows_server_2016

References

http://www.securityfocus.com/bid/103380
http://www.securitytracker.com/id/1040520
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0977
http://www.securityfocus.com/bid/103380
http://www.securitytracker.com/id/1040520

Check your stack JSON