CVE-2018-0823

HIGH

Windows 10 <1709 - Privilege Escalation

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2018-0823. PoCs published by Google Security Research.

AI-analyzed exploit summary The writeup details a security feature bypass in Windows 10 1709's NPFS symlink implementation, allowing low-integrity users to create symlinks that can lead to elevation of privilege or dangerous behavior. It includes a technical analysis of the vulnerability and a proof-of-concept description.

Description

The Named Pipe File System in Windows 10 version 1709 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way the Named Pipe File System handles objects, aka "Named Pipe File System Elevation of Privilege Vulnerability".

Exploits (1)

exploitdb WRITEUP VERIFIED
by Google Security Research · textlocalwindows
https://www.exploit-db.com/exploits/44148

The writeup details a security feature bypass in Windows 10 1709's NPFS symlink implementation, allowing low-integrity users to create symlinks that can lead to elevation of privilege or dangerous behavior. It includes a technical analysis of the vulnerability and a proof-of-concept description.

Classification
Writeup 90%
Attack Type
Other
Complexity
Moderate
Reliability
Theoretical
Target: Windows 10 1709
Auth required
Prerequisites: Access to a low-integrity user account · Ability to compile and run C# code
devstral-2 · analyzed Feb 18, 2026 Full analysis →

References (4)

Core 4
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1040379
Exploit, Third Party Advisory, VDB Entry exploit x_refsource_exploit-db
https://www.exploit-db.com/exploits/44148/
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/102919

Scores

CVSS v3 7.0
EPSS 0.0274
EPSS Percentile 84.2%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

Status published
Products (2)
microsoft/windows_10 1709
microsoft/windows_server_2016 1709
Published Feb 15, 2018
Tracked Since Feb 18, 2026