CVE-2018-8399

7.0 highEPSS 1.2%

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This affects Windows 10 Servers, Windows 10. This CVE ID is unique from CVE-2018-8404.

Severity

CVSS 3.0

7.0 high

CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.2% chance of exploitation in the next 30 days; higher than 67% of CVEs (scores of 2026-10-31)
CWE: CWE-404
Published: 2018-08-15
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

microsoft:windows_10
microsoft:windows_server

References

http://www.securityfocus.com/bid/104998
http://www.securitytracker.com/id/1041466
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8399
http://www.securityfocus.com/bid/104998
http://www.securitytracker.com/id/1041466

Check your stack JSON