ID:6403 - Exploit for Privilege escalation in Windows and Windows Server - CVE-2018-0880

 
Main Vulnerability Database Exploits ID:6403 - Exploit for Privilege escalation in Windows and Windows Server - CVE-2018-0880

ID:6403 - Exploit for Privilege escalation in Windows and Windows Server - CVE-2018-0880

Published: June 17, 2021


Vulnerability identifier: #VU11061
Vulnerability risk: Low
CVE-ID: CVE-2018-0880
CWE-ID: CWE-264
Exploitation vector: Local access
Vulnerable software:
Windows
Windows Server

Link to public exploit:


Vulnerability description

The vulnerability allows a local attacker to gain elevated privileges on the target system.

The weakness exists due to improper management of the virtual registry by Desktop Bridge. A local attacker can run a specially crafted application and run arbitrary code in kernel mode.

Remediation

Install updates from vendor's website.