CVE-2018-8253

4.6 mediumEPSS 1.9%

An elevation of privilege vulnerability exists when Microsoft Cortana allows arbitrary website browsing on the lockscreen, aka "Microsoft Cortana Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10.

Severity

CVSS 3.0

4.6 medium

CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 1.9% chance of exploitation in the next 30 days; higher than 79% of CVEs (scores of 2026-10-31)
Published: 2018-08-15
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

microsoft:windows_10
microsoft:windows_server_2016

References

http://www.securityfocus.com/bid/105009
http://www.securitytracker.com/id/1041477
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8253
http://www.securityfocus.com/bid/105009
http://www.securitytracker.com/id/1041477

Check your stack JSON