high7.0Public exploit code
CVE-2018-0880
The Desktop Bridge in Windows 10 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microsoft Windows - Desktop Bridge Virtual Registry Arbitrary File Read/Write Privilege Escalation2018-03-20 · local · windows · Verified
Impact
The Desktop Bridge in Windows 10 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to how the virtual registry is managed, aka "Windows Desktop Bridge Elevation of Privilege Vulnerability". This CVE is unique from CVE-2018-0882.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Windows 10 | All versions Versions 1607, 1703, 1709 |
| Microsoft | Windows Server | Version 1709 |
| Microsoft | Windows Server 2016 | All versions |
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/103239
- http://www.securitytracker.com/id/1040520
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0880
- https://www.exploit-db.com/exploits/44314/
- http://www.securityfocus.com/bid/103239
- http://www.securitytracker.com/id/1040520
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0880
- https://www.exploit-db.com/exploits/44314/