CVE-2018-0790

—

CVSS 3.0

8.8 high

EPSS

5%p92

Published

Jan 10, 2018 (Jan 10, 2018)

Modified

Jun 17, 2026

Description

Microsoft SharePoint Foundation 2010, Microsoft SharePoint Server 2013 and Microsoft SharePoint Server 2016 allow an elevation of privilege vulnerability due to the way web requests are handled, aka "Microsoft SharePoint Elevation of Privilege Vulnerability". This CVE is unique from CVE-2018-0789.

Vendors: microsoft
Products: sharepoint enterprise server, sharepoint foundation
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (5.3%)

In the news1 stories

Microsoft Patch Tuesday

Cisco TalosJan 9, 21:36 UTC · Jan 9, 2018Vulnerability CVE-2018-0758 CVE-2018-0762 CVE-2018-0767+51 CVEs