CVE-2018-8170

7.0 highEPSS 1.0%

An elevation of privilege vulnerability exists in the way that the Windows kernel image handles objects in memory, aka "Windows Image Elevation of Privilege Vulnerability." This affects Windows 10, Windows 10 Servers.

Severity

CVSS 3.0

7.0 high

CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.0% chance of exploitation in the next 30 days; higher than 62% of CVEs (scores of 2026-10-31)
CWE: CWE-404
Published: 2018-05-09
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

microsoft:windows_10
microsoft:windows_server_2016

References

http://www.securityfocus.com/bid/104068
http://www.securitytracker.com/id/1040849
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8170
http://www.securityfocus.com/bid/104068
http://www.securitytracker.com/id/1040849

Check your stack JSON