High severity7.8NVD Advisory· Published Feb 15, 2018· Updated Jun 17, 2026

CVE-2018-0828

Description

Windows 10 version 1607 and Windows Server 2016 allow an elevation of privilege vulnerability due to how the MultiPoint management account password is stored, aka "Windows Elevation of Privilege Vulnerability".

Affected products

Microsoft/Windows 10 version 1607llm-create
Range: 1607
Microsoft/Windows Server 2016llm-fuzzy
Range: 2016
Microsoft/Windowsv5
Range: Windows 10 version 1607 and Windows Server 2016

Patches

Vulnerability mechanics

References

portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0828nvdPatchVendor Advisory
www.securityfocus.com/bid/102935nvdThird Party AdvisoryVDB Entry
www.securitytracker.com/id/1040373nvdThird Party AdvisoryVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000