CVE-2018-0823

high

Description

The Named Pipe File System in Windows 10 version 1709 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way the Named Pipe File System handles objects, aka "Named Pipe File System Elevation of Privilege Vulnerability".

References

http://www.securitytracker.com/id/1040379

http://www.securityfocus.com/bid/102919

https://www.exploit-db.com/exploits/44148/

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0823

Details

Source: Mitre, NVD

Published: 2018-02-15

Updated: 2024-11-21

Risk Information

CVSS v2

Base Score: 4.4

Vector: CVSS2#AV:L/AC:M/Au:N/C:P/I:P/A:P

Severity: Medium

CVSS v3

Base Score: 7

Vector: CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Severity: High

EPSS

EPSS: 0.00718