Medium severity4.6NVD Advisory· Published Aug 15, 2018· Updated Jun 17, 2026

CVE-2018-8253

Description

An elevation of privilege vulnerability exists when Microsoft Cortana allows arbitrary website browsing on the lockscreen, aka "Microsoft Cortana Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10.

Affected products

Microsoft/Cortanallm-fuzzy
Microsoft/Windows 10 1909cpe-rescue
Range: Version 1607 for 32-bit Systems
Microsoft/Windows Server 2016cpe-rescue
Range: (Server Core installation)

Patches

Vulnerability mechanics

References

portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8253nvdPatchVendor Advisory
www.securityfocus.com/bid/105009nvdThird Party AdvisoryVDB Entry
www.securitytracker.com/id/1041477nvdThird Party AdvisoryVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.299
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000