{
  "cveId": "CVE-2018-8253",
  "url": "https://patchblox.com/security/cve/CVE-2018-8253",
  "summary": "CVE-2018-8253 is fixed in 4 products on 1 platform, first by KB4343887, released August 14, 2018. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "Microsoft Cortana Elevation of Privilege Vulnerability",
  "description": "\u003Cp\u003EAn elevation of privilege vulnerability exists when Microsoft Cortana allows arbitrary website browsing on the lockscreen.\u003C/p\u003E\n\u003Cp\u003EAn attacker who successfully exploited the vulnerability could steal browser stored passwords or log on to websites as another user.\nTo exploit the vulnerability, an attacker would require physical access to the console and the system must have Microsoft Cortana assistance enabled.\u003C/p\u003E\n\u003Cp\u003EThe security update addresses the vulnerability by preventing Microsoft Cortana from allowing arbitrary website browsing on the lockscreen.\u003C/p\u003E",
  "published": "2018-08-14T07:00:00Z",
  "severity": "Important",
  "cvss": 4,
  "epss": 0.0193,
  "epssPercentile": 0.80092,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "exploitabilityAssessment": "N/A",
  "vendorAdvisory": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2018-8253",
  "fixes": [
    {
      "platform": "microsoft",
      "product": "Windows 10 Version 1607 for 32-bit Systems",
      "fixedVersion": "14393.2430",
      "fix": "KB4343887",
      "url": "https://patchblox.com/security/fix/microsoft/kb4343887",
      "released": "2018-08-14T00:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows 10 Version 1607 for x64-based Systems",
      "fixedVersion": "14393.2430",
      "fix": "KB4343887",
      "url": "https://patchblox.com/security/fix/microsoft/kb4343887",
      "released": "2018-08-14T00:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows Server 2016",
      "fixedVersion": "14393.2430",
      "fix": "KB4343887",
      "url": "https://patchblox.com/security/fix/microsoft/kb4343887",
      "released": "2018-08-14T00:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows Server 2016 (Server Core installation)",
      "fixedVersion": "14393.2430",
      "fix": "KB4343887",
      "url": "https://patchblox.com/security/fix/microsoft/kb4343887",
      "released": "2018-08-14T00:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-07T12:40:37Z"
}