Description (CNA)
An elevation of privilege vulnerability exists when Microsoft Cortana allows arbitrary website browsing on the lockscreen, aka "Microsoft Cortana Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Microsoft / Windows Server 2016 | affected (Server Core installation) |
| Microsoft / Windows 10 | affected Version 1607 for 32-bit Systems; affected Version 1607 for x64-based Systems |
CWE
No CWE identifiers supplied.
References
- http://www.securitytracker.com/id/1041477
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8253
- http://www.securityfocus.com/bid/105009
ADP enrichment
No English description supplied.