What’s Vulnerable › Vulnerabilities

CVE-2018-1038

• Severity: high (CVSS 7.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 8.5% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2018-04-02 · updated 2026-06-17

Description

The Windows kernel in Windows 7 SP1 and Windows Server 2008 R2 SP1 allows an elevation of privilege vulnerability due to the way it handles objects in memory, aka "Windows Kernel Elevation of Privilege Vulnerability."

Affected products

• Microsoft Windows 7: all versions
• Microsoft Windows Server 2008: r2-sp1
• Microsoft Corporation Windows: Windows 7 SP1 and Windows Server 2008 R2 SP1

References

• http://www.securityfocus.com/bid/103549
• http://www.securitytracker.com/id/1040632
• https://blog.xpnsec.com/total-meltdown-cve-2018-1038/
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-1038
• https://www.exploit-db.com/exploits/44581/
• http://www.securityfocus.com/bid/103549
• http://www.securitytracker.com/id/1040632
• https://blog.xpnsec.com/total-meltdown-cve-2018-1038/
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-1038
• https://www.exploit-db.com/exploits/44581/

Get alerted when CVE-2018-1038 or the next vulnerability affects your stack