CVE-2018-8584

HIGH 7.8EPSS 2.7%

An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC), aka "Windows ALPC Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows Server 2019, Windows 10 Servers.

Affected: Microsoft · Windows Server 2016 · Windows 10 · Windows Server 2019 · Windows 10 Servers
CVSS v3.0 NVD: 7.8 HIGHCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v2.0 NVD: 7.2 HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C
EPSS: 2.70% chance of exploitation in the next 30 days, 86th percentile
Published: 2018-11-14
Updated: 2024-08-05

ExploitDB entries (1)

https://www.exploit-db.com/exploits/46104

Security advisories

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8584
http://www.securityfocus.com/bid/105808
http://www.securitytracker.com/id/1042119

References

CVE Record
NVD entry