Not rated
CVE-2018-0886 The Credential Security Support Provider protocol (CredSSP) in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7…
Description
The Credential Security Support Provider protocol (CredSSP) in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709 Windows Server 2016 and Windows Server, version 1709 allows a remote code execution vulnerability due to how CredSSP validates request during the authentication process, aka "CredSSP Remote Code Execution Vulnerability".
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Windows | Versions not published |
References
- 1040506 www.securitytracker.com
- 103265 www.securityfocus.com
- ics-cert.us-cert.gov ics-cert.us-cert.gov
- portal.msrc.microsoft.com portal.msrc.microsoft.com
- blog.preempt.com blog.preempt.com
- 44453 www.exploit-db.com
- github.com github.com
Timeline
- Published
- Last modified
Other CVEs of Windows
The 33 CVEs of Windows →
CVE-2018-1038
The Windows kernel in Windows 7 SP1 and Windows Server 2008 R2 SP1 allows an elevation of privilege vulnerability due to…
Not rated
CVE-2018-0817
The Windows Graphics Device Interface (GDI) in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows…
Not rated
CVE-2018-0816
The Windows Graphics Device Interface (GDI) in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows…
Not rated
CVE-2018-0815
The Windows Graphics Device Interface (GDI) in Microsoft Windows Server 2008 SP2 and R2 SP1 and Windows 7 SP1 allows…
Not rated