vulnerability

Microsoft Windows: CVE-2018-0877: Windows Desktop Bridge VFS Elevation of Privilege Vulnerability

Try Surface Command

Back to search

Severity

CVSS

(AV:L/AC:L/Au:N/C:C/I:C/A:C)

Published

Mar 13, 2018

Added

Mar 13, 2018

Modified

Sep 5, 2025

Description

The Desktop Bridge Virtual File System (VFS) in Windows 10 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to how file paths are managed, aka "Windows Desktop Bridge VFS Elevation of Privilege Vulnerability".

Solutions

microsoft-windows-windows_10-1607-kb4088787microsoft-windows-windows_10-1703-kb4088782microsoft-windows-windows_10-1709-kb4088776microsoft-windows-windows_server_2016-1607-kb4088787

References

BID-103227
CVE-2018-0877
https://attackerkb.com/topics/CVE-2018-0877
https://support.microsoft.com/help/4088776
https://support.microsoft.com/help/4088782
https://support.microsoft.com/help/4088787

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report