vulnerability
Microsoft Windows: CVE-2018-8253: Microsoft Cortana Elevation of Privilege Vulnerability
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 2 | (AV:L/AC:L/Au:N/C:P/I:N/A:N) | Aug 14, 2018 | Aug 14, 2018 | Sep 5, 2025 |
Severity
2
CVSS
(AV:L/AC:L/Au:N/C:P/I:N/A:N)
Published
Aug 14, 2018
Added
Aug 14, 2018
Modified
Sep 5, 2025
Description
An elevation of privilege vulnerability exists when Microsoft Cortana allows arbitrary website browsing on the lockscreen, aka "Microsoft Cortana Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10.
Solutions
microsoft-windows-windows_10-1607-kb4343887microsoft-windows-windows_server_2016-1607-kb4343887
Rapid7 Labs
2026 Global Threat Landscape Report
The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.