CVE-2018-8140
MEDIUM EXPLOITED RANSOMWAREWindows 10 Server - Privilege Escalation
Title source: llmExploitation Summary
CVE-2018-8140 has been observed exploited in the wild (reported by VulnCheck KEV), including in ransomware campaigns.
Description
An Elevation of Privilege vulnerability exists when Cortana retrieves data from user input services without consideration for status, aka "Cortana Elevation of Privilege Vulnerability." This affects Windows 10 Servers, Windows 10.
References (3)
Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/104354
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1041108
Patch, Vendor Advisory x_refsource_confirm
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8140
Scores
CVSS v3
6.8
EPSS
0.0164
EPSS Percentile
74.1%
Attack Vector
PHYSICAL
CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
VulnCheck KEV
2020-10-01
Ransomware Use
Confirmed
Status
published
Products (4)
microsoft/windows_10
1709
microsoft/windows_10
1803
microsoft/windows_server_1803
microsoft/windows_server_2016
1709
Published
Jun 14, 2018
Tracked Since
Feb 18, 2026