CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2018-09-13
Windows ALPC Local Elevation of Privilege Vulnerability Technical Advisory (CVE-2018-8440)
[Affected Scope] Windows 7, 8.1, 10, and Windows Server 2008, 2012, 2016
[Impact] A local attacker with low-privilege access can exploit the ALPC interface to execute arbitrary code with SYSTEM privileges, leading to full system compromise
[Mitigation] Apply the official Microsoft cumulative security updates immediately and restrict write access to system task directories