CVE-2018-8219

Hypervisor Code Integrity Elevation of Privilege Vulnerability

CVE-2018-8219 is fixed in 8 products on 1 platform, first by KB4284880, released June 12, 2018. It is not reported as exploited. Patch Radar priority: High.

High
CVSS
7.6
Important
Exploitation
None reported
Exploitation Less Likely
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0120
68th percentile

<p>An elevation of privilege vulnerability exists when Windows Hyper-V instruction emulation fails to properly enforce privilege levels. An attacker who successfully exploited this vulnerability could gain elevated privileges on a target guest operating system. The host operating system is not vulnerable to this attack.</p> <p>This vulnerability by itself does not allow arbitrary code to be run. However, the vulnerability could be used in conjunction with one or more vulnerabilities (e.g. a remote code execution vulnerability and another elevation of privilege) that could take advantage of the elevated privileges when running.</p> <p>The update addresses the vulnerability by correcting how privileges are enforced by Windows Hyper-V instruction emulation.</p>

Where it's fixed

ProductFixed inFixReleased
Microsoft
Windows 10 Version 1607 for x64-based Systems 14393.2312 KB4284880 Jun 12, 2018
Windows 10 Version 1703 for x64-based Systems 15063.1155 KB4284874 Jun 12, 2018
Windows 10 Version 1709 for x64-based Systems 16299.492 KB4284819 Jun 12, 2018
Windows 10 Version 1803 for x64-based Systems 17134.112 KB4284835 Jun 12, 2018
Windows Server 2016 14393.2312 KB4284880 Jun 12, 2018
Windows Server 2016 (Server Core installation) 14393.2312 KB4284880 Jun 12, 2018
Windows Server, version 1709 (Server Core Installation) 16299.492 KB4284819 Jun 12, 2018
Windows Server, version 1803 (Server Core Installation) 17134.112 KB4284835 Jun 12, 2018