High severity7.8NVD Advisory· Published Feb 15, 2018· Updated Jun 17, 2026

CVE-2018-0844

Description

The Windows Common Log File System (CLFS) driver in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to how objects in memory are handled, aka "Windows Common Log File System Driver Elevation Of Privilege Vulnerability". This CVE is unique from CVE-2018-0846.

Affected products

Microsoft/Windowsllm-fuzzy
Range: Windows 7 SP1, 8.1, RT 8.1, Server 2008 SP2/R2 SP1, Server 2012/R2, 10 (Gold/1511/1607/1703/1709), Server 2016, Server 1709
Microsoft Corporation/Windows Common Log File Systemv5
Range: Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709

Patches

Vulnerability mechanics

References

portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0844nvdPatchVendor Advisory
www.securityfocus.com/bid/102929nvdThird Party AdvisoryVDB Entry
www.securitytracker.com/id/1040380nvdThird Party AdvisoryVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000