CVE-2018-1038

The Windows kernel in Windows 7 SP1 and Windows Server 2008 R2 SP1 allows an elevation of privilege vulnerability due to the way it handles objects in memory, aka "Windows Kernel Elevation of Privilege Vulnerability."

CVSS v3.0

7.8 HIGHCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0

7.2 HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C

EPSS

8.67% chance of exploitation in the next 30 days, 95th percentile

Published

2018-04-02

Updated

2024-09-17

Proof-of-concept exploits (1)

• https://blog.xpnsec.com/total-meltdown-cve-2018-1038/

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/44581

References

• CVE Record
• NVD entry

Related

• CVE-2018-10376
• CVE-2018-10383
• CVE-2018-10371
• CVE-2018-10388
• CVE-2018-10366
• CVE-2018-10391