CVE-2018-8440
An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC), aka "Windows ALPC Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.
- Affected products
- Windows, Windows 10, Windows 10 Servers, Windows 7, Windows 8.1, Windows Rt 8.1, Windows Server 2008, Windows Server 2008 R2
- Microsoft Windows 10 1607
- All versions
- Microsoft Windows 10 1703
- All versions
- Microsoft Windows 10 1709
- All versions
- Microsoft Windows 10 1803
- All versions
- Microsoft Windows 7
- All versions
- Microsoft Windows 8.1
- All versions
- Fix
- Available
- CVSS 3.1
- 7.8 HIGH
- EPSS
- 18.4% (97th percentile)
- NVD status
- Analyzed
- Published
- 2018-09-13
CVE-2018-8440 at NVD
8 known exploits for CVE-2018-8440
Proof-of-concept code and exploit modules indexed by Sploitus
windows-kernel-exploits
CVE-2018-8440
Exploit for Code Injection in Microsoft
Exploit for Code Injection in Microsoft
Microsoft Windows ALPC Task Scheduler Local Privilege Elevation Exploit
Microsoft Windows ALPC Task Scheduler Local Privilege Elevation
Immunity Canvas: ALPC_TASKSCHED_LPE
Microsoft Windows ALPC Task Scheduler Local Privilege Elevation