CVE-2018-0823: microsoft corporation named pipe file system
Vulnerability summary
CVE-2018-0823 is a high (CVSS 7.0) vulnerability in microsoft corporation named pipe file system. EPSS estimates a 2.63% chance of exploitation in the next 30 days, higher than 85.3% of scored vulnerabilities. 1 public exploit is recorded.
Timeline
- 15-02-2018PublishedVulnerability first disclosed.
- 16-09-2024Last modifiedVulnerability information updated.
Description
The Named Pipe File System in Windows 10 version 1709 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way the Named Pipe File System handles objects, aka "Named Pipe File System Elevation of Privilege Vulnerability".
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
2.63%
Chance of exploitation in the next 30 days
Percentile
85%
Versus all other CVEs
30-day change
0.00 pp
From 2.63% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundMicrosoft Windows - NPFS Symlink Security Feature Bypass/Elevation of Privilege/Dangerous Behavior
Maturity: weaponized
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Microsoft2 products
- windows_101709
- windows_server_20161709
Microsoft corporation1 product
- named pipe file systemWindows 10 version 1709 and Windows Server, version 1709
2 vendors · 3 products
References
4 links
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0823X Refsource CONFIRMPatchVendor Advisory