CVE-2018-0882 json
The Desktop Bridge in Windows 10 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privileg…
published 2018-03-14 8 y ago modified 2026-06-17 4 mo ago also EUVD-2018-1673
- cvss
- 7.0
- version 3.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 2.8%
- EPSS 2.8% chance of exploitation in 30 days, percentile 86%
- public exploits
- 1
- Exploit-DB
Summary
The Desktop Bridge in Windows 10 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to how the virtual registry is managed, aka "Windows Desktop Bridge Elevation of Privilege Vulnerability". This CVE is unique from CVE-2018-0880.
Patch / fix
Timeline
- Published
- First public exploit (EDB-44315)
Exploit prediction
2.81% chance of exploitation in the next 30 days, higher than 86% of all scored CVEs (FIRST EPSS, 2026-11-09).
Exploits and checks
- EDB-44315 Microsoft Windows - Desktop Bridge Virtual Registry NtLoadKey Arbitrary File Read/Write Privilege Escalation local, 2018-03-20
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 3.0 | 7.0 | CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H |
| NVD | 2.0 | 6.9 | AV:L/AC:M/Au:N/C:C/I:C/A:C |
Affected products
- Microsoft Corporation Windows Deskop Bridge
References
-
portal.msrc.microsoft.com
/en-US/security-guidance/advisory/CVE-2018-0882
patch, vendor-advisory
-
exploit-db.com
/exploits/44315/
exploit, third-party-advisory, vdb-entry
-
securityfocus.com
/bid/103257
vdb-entry, third-party-advisory
-
securitytracker.com
/id/1040520
vdb-entry, third-party-advisory
Sources
- CVE List CVE-2018-0882
- NVD CVE-2018-0882
Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.