CVE-2018-1038

7.8 highEPSS 8.5%

The Windows kernel in Windows 7 SP1 and Windows Server 2008 R2 SP1 allows an elevation of privilege vulnerability due to the way it handles objects in memory, aka "Windows Kernel Elevation of Privilege Vulnerability."

Severity

CVSS 3.0

7.8 high

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 8.5% chance of exploitation in the next 30 days; higher than 95% of CVEs (scores of 2026-10-31)
Published: 2018-04-02
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

microsoft:windows_7
microsoft:windows_server_2008

References

http://www.securityfocus.com/bid/103549
http://www.securitytracker.com/id/1040632
https://blog.xpnsec.com/total-meltdown-cve-2018-1038/
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-1038
https://www.exploit-db.com/exploits/44581/

Check your stack JSON