Medium severity6.8NVD Advisory· Published Jun 14, 2018· Updated Jun 17, 2026

CVE-2018-8140

Description

An Elevation of Privilege vulnerability exists when Cortana retrieves data from user input services without consideration for status, aka "Cortana Elevation of Privilege Vulnerability." This affects Windows 10 Servers, Windows 10.

Affected products

Microsoft/Cortanallm-fuzzy
Microsoft/Windows 10 1909cpe-rescue
Range: Version 1709 for 32-bit Systems
Microsoft/Windows Server 2003cpe-rescue
Range: version 1709 (Server Core Installation)

Patches

Vulnerability mechanics

References

portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8140nvdPatchVendor Advisory
www.securityfocus.com/bid/104354nvdThird Party AdvisoryVDB Entry
www.securitytracker.com/id/1041108nvdThird Party AdvisoryVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.442
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000