high7.8Public exploit code
CVE-2018-0877
The Desktop Bridge Virtual File System (VFS) in Windows 10 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of pr…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microsoft Windows - Desktop Bridge VFS Privilege Escalation2018-03-20 · local · windows_x86-64 · Verified
Impact
The Desktop Bridge Virtual File System (VFS) in Windows 10 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to how file paths are managed, aka "Windows Desktop Bridge VFS Elevation of Privilege Vulnerability".
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Windows 10 | Versions 1607, 1703, 1709 |
| Microsoft | Windows Server | Version 1709 |
| Microsoft | Windows Server 2016 | All versions |
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/103227
- http://www.securitytracker.com/id/1040520
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0877
- https://www.exploit-db.com/exploits/44313/
- http://www.securityfocus.com/bid/103227
- http://www.securitytracker.com/id/1040520
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0877
- https://www.exploit-db.com/exploits/44313/