CVE-2018-0880 json
The Desktop Bridge in Windows 10 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privileg…
published 2018-03-14 8 y ago modified 2026-06-17 4 mo ago also EUVD-2018-1671
- cvss
- 7.0
- version 3.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 3.1%
- EPSS 3.1% chance of exploitation in 30 days, percentile 87%
- public exploits
- 1
- Exploit-DB
Summary
The Desktop Bridge in Windows 10 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to how the virtual registry is managed, aka "Windows Desktop Bridge Elevation of Privilege Vulnerability". This CVE is unique from CVE-2018-0882.
Patch / fix
Timeline
- Published
- First public exploit (EDB-44314)
Exploit prediction
3.06% chance of exploitation in the next 30 days, higher than 87% of all scored CVEs (FIRST EPSS, 2026-11-09).
Exploits and checks
- EDB-44314 Microsoft Windows - Desktop Bridge Virtual Registry Arbitrary File Read/Write Privilege Escalation local, 2018-03-20
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 3.0 | 7.0 | CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H |
| NVD | 2.0 | 6.9 | AV:L/AC:M/Au:N/C:C/I:C/A:C |
Affected products
- Microsoft Corporation Windows Desktop Bridge
References
-
portal.msrc.microsoft.com
/en-US/security-guidance/advisory/CVE-2018-0880
patch, vendor-advisory
-
exploit-db.com
/exploits/44314/
exploit, third-party-advisory, vdb-entry
-
securityfocus.com
/bid/103239
vdb-entry, third-party-advisory
-
securitytracker.com
/id/1040520
vdb-entry, third-party-advisory
Sources
- CVE List CVE-2018-0880
- NVD CVE-2018-0880
Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.