CVE-2018-0878

LOW

Windows Remote Assistance - Information Disclosure via XML External Entity Processing

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2018-0878. PoCs published by Nabeel Ahmed.

AI-analyzed exploit summary This exploit leverages an XXE (XML External Entity) vulnerability in Microsoft Windows Remote Assistance to read arbitrary files from the target system. The PoC includes two XML files: one for the initial XXE injection and another for out-of-band data exfiltration.

Description

Windows Remote Assistance in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an information disclosure vulnerability due to how XML External Entities (XXE) are processed, aka "Windows Remote Assistance Information Disclosure Vulnerability".

Exploits (1)

exploitdb WORKING POC VERIFIED
by Nabeel Ahmed · textwebappswindows
https://www.exploit-db.com/exploits/44352

This exploit leverages an XXE (XML External Entity) vulnerability in Microsoft Windows Remote Assistance to read arbitrary files from the target system. The PoC includes two XML files: one for the initial XXE injection and another for out-of-band data exfiltration.

Classification
Working Poc 90%
Attack Type
Info Leak
Complexity
Moderate
Reliability
Reliable
Target: Microsoft Windows Remote Assistance (Windows 7, Windows 10)
No auth needed
Prerequisites: Attacker-controlled domain to host malicious XML files · Target system must process the malicious Remote Assistance invitation
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (4)

Core 4
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1040519
Third Party Advisory, VDB Entry exploit x_refsource_exploit-db
https://www.exploit-db.com/exploits/44352/
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/103230

Scores

CVSS v3 3.1
EPSS 0.2190
EPSS Percentile 97.3%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact partial

Details

CWE
CWE-611
Status published
Products (14)
microsoft/windows_10
microsoft/windows_10 1511
microsoft/windows_10 1607
microsoft/windows_10 1703
microsoft/windows_10 1709
microsoft/windows_7
microsoft/windows_8.1
microsoft/windows_rt_8.1
microsoft/windows_server_2008
microsoft/windows_server_2008 r2 sp1
... and 4 more
Published Mar 14, 2018
Tracked Since Feb 18, 2026