{
  "cveId": "CVE-2018-8592",
  "url": "https://patchblox.com/security/cve/CVE-2018-8592",
  "summary": "CVE-2018-8592 is fixed in 5 products on 1 platform, first by KB4467708, released November 13, 2018. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "Windows Elevation Of Privilege Vulnerability",
  "description": "\u003Cp\u003EAn elevation of privilege vulnerability exists in Windows 10 version 1809 when installed from physical media (USB, DVD, etc.) with the \u201Ckeep nothing\u201D option selected during installation. Successful exploitation of the vulnerability could allow an attacker to gain local access to an affected system.\u003C/p\u003E\n\u003Cp\u003ETo exploit the vulnerability, an attacker would need physical access to the console of the affected system.\u003C/p\u003E\n\u003Cp\u003EThe update addresses the vulnerability by changing built-in account behavior after the setup process completes.\u003C/p\u003E\n\u003Cp\u003EFor recommendations on managing the local administrator accounts, please see \u003Ca href=\u0022https://docs.microsoft.com/en-us/windows-server/identity/ad-ds/plan/security-best-practices/implementing-least-privilege-administrative-models\u0022\u003EImplementing Least-Privilege Administrative Models\u003C/a\u003E\u003C/p\u003E",
  "published": "2018-11-13T14:00:00Z",
  "severity": "Important",
  "cvss": 6.4,
  "epss": 0.0125,
  "epssPercentile": 0.69506,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "exploitabilityAssessment": "Exploitation Less Likely",
  "vendorAdvisory": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2018-8592",
  "fixes": [
    {
      "platform": "microsoft",
      "product": "Windows 10 Version 1809 for 32-bit Systems",
      "fixedVersion": "17763.134",
      "fix": "KB4467708",
      "url": "https://patchblox.com/security/fix/microsoft/kb4467708",
      "released": "2018-11-13T00:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows 10 Version 1809 for ARM64-based Systems",
      "fixedVersion": "17763.134",
      "fix": "KB4467708",
      "url": "https://patchblox.com/security/fix/microsoft/kb4467708",
      "released": "2018-11-13T00:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows 10 Version 1809 for x64-based Systems",
      "fixedVersion": "17763.134",
      "fix": "KB4467708",
      "url": "https://patchblox.com/security/fix/microsoft/kb4467708",
      "released": "2018-11-13T00:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows Server 2019",
      "fixedVersion": "17763.134",
      "fix": "KB4467708",
      "url": "https://patchblox.com/security/fix/microsoft/kb4467708",
      "released": "2018-11-13T00:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows Server 2019 (Server Core installation)",
      "fixedVersion": "17763.134",
      "fix": "KB4467708",
      "url": "https://patchblox.com/security/fix/microsoft/kb4467708",
      "released": "2018-11-13T00:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-07T12:40:37Z"
}