CVE-2018-8140

MEDIUM EXPLOITED RANSOMWARE

Windows 10 Server - Privilege Escalation

Title source: llm
STIX 2.1

Exploitation Summary

CVE-2018-8140 has been observed exploited in the wild (reported by VulnCheck KEV), including in ransomware campaigns.

Description

An Elevation of Privilege vulnerability exists when Cortana retrieves data from user input services without consideration for status, aka "Cortana Elevation of Privilege Vulnerability." This affects Windows 10 Servers, Windows 10.

References (3)

Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/104354
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1041108

Scores

CVSS v3 6.8
EPSS 0.0164
EPSS Percentile 74.1%
Attack Vector PHYSICAL
CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

VulnCheck KEV 2020-10-01
Ransomware Use Confirmed
Status published
Products (4)
microsoft/windows_10 1709
microsoft/windows_10 1803
microsoft/windows_server_1803
microsoft/windows_server_2016 1709
Published Jun 14, 2018
Tracked Since Feb 18, 2026