NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

CVE-2018-8170

CVSS 3.0: 7.0 high
EPSS: 1%p62
Published: May 9, 2018 · May 9, 2018
Modified: Jun 17, 2026

Analyze CVE-2018-8170 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

An elevation of privilege vulnerability exists in the way that the Windows kernel image handles objects in memory, aka "Windows Image Elevation of Privilege Vulnerability." This affects Windows 10, Windows 10 Servers.

Vendors: microsoft

Products: windows 10, windows server 2016

Weakness: CWE-404

Vector: CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.0%)

In the news

3 stories

May 2018 Patch Tuesday: Microsoft fixes 2 zero-day flaws reportedly exploited by APT group

Security AffairsMay 9, 08:09 UTC · May 9, 2018Exploit / PoCExploitedCVE-2018-8174 CVE-2018-8120 CVE-2018-8170+14 · 2 reads

60

Microsoft Patches Two Zero

The Hacker NewsMay 9, 06:14 UTC · May 9, 2018VulnerabilityExploitedCVE-2018-8174 CVE-2018-8120 CVE-2018-8141+14 · 2 reads

60

Microsoft Patch Tuesday

Cisco TalosMay 8, 19:02 UTC · May 8, 2018VulnerabilityCVE-2018-4944 CVE-2018-8174 CVE-2018-0959+613 · 1 read

60