New Search

Cortana Elevation of Privilege Vulnerability - CVE-2018-8140

oval:org.cisecurity:def:5936

An Elevation of Privilege vulnerability exists when Cortana retrieves data from user input services without consideration for status. An attacker who successfully exploited the vulnerability could execute commands with elevated permissions. To exploit the vulnerability an attacker would require physical/console access and the system would need to have Cortana assistance enabled. The security update addresses the vulnerability by ensuring Cortana considers status when retrieves information from input services.

Family:
windows
Status:
ACCEPTED
Platform(s):
  • Microsoft Windows 10
Class:
vulnerability
Reference(s):
  • CVE-2018-8140
  • MSRC-CVE-2018-8140
  • KB4284819
  • KB4284835
Product(s):