PT-2018-9104 · Microsoft · Windows Server 2016+9
Published
2018-02-13
·
Updated
2019-10-03
·
CVE-2018-0846
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions:
Windows versions prior to the fixed version
Windows 7 SP1
Windows 8.1 and RT 8.1
Windows Server 2008 SP2 and R2 SP1
Windows Server 2012 and R2
Windows 10 versions prior to the fixed version, including Gold, 1511, 1607, 1703, and 1709
Windows Server 2016 and Windows Server, version 1709
Description:
The issue is related to how objects in memory are handled by the Windows Common Log File System (CLFS) driver, allowing an elevation of privilege. This could enable attackers to affect the system.
Recommendations:
For Windows 7 SP1, update to a newer version to mitigate the risk.
For Windows 8.1 and RT 8.1, update to a newer version to mitigate the risk.
For Windows Server 2008 SP2 and R2 SP1, update to a newer version to mitigate the risk.
For Windows Server 2012 and R2, update to a newer version to mitigate the risk.
For Windows 10 versions prior to the fixed version, including Gold, 1511, 1607, 1703, and 1709, update to a newer version to mitigate the risk.
For Windows Server 2016 and Windows Server, version 1709, update to a newer version to mitigate the risk.
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Windows
Windows 10
Windows 7
Windows 8.1
Windows Rt 8.1
Windows Server 2008
Windows Server 2008 R2
Windows Server 2012
Windows Server 2012 R2
Windows Server 2016