High severity7.0NVD Advisory· Published Mar 14, 2018· Updated Jun 17, 2026

CVE-2018-0815

Description

The Windows Graphics Device Interface (GDI) in Microsoft Windows Server 2008 SP2 and R2 SP1 and Windows 7 SP1 allows an elevation of privilege vulnerability due to the way objects are handled in memory, aka "Windows GDI Elevation of Privilege Vulnerability". This CVE is unique from CVE-2018-0816, and CVE-2018-0817.

Affected products

Microsoft/Windows Graphics Device Interfacellm-fuzzy
Microsoft/Windowsv5
Range: Microsoft Windows Server 2008 SP2 and R2 SP1 and Windows 7 SP1

Patches

Vulnerability mechanics

References

portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0815nvdPatchVendor Advisory
www.securityfocus.com/bid/103234nvdThird Party AdvisoryVDB Entry
www.securitytracker.com/id/1040515nvdThird Party AdvisoryVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.455
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000