CVE-2018-0743 is an elevation of privilege vulnerability in the Windows Subsystem for Linux (WSL) affecting Windows 10 versions 1703 and 1709, and Windows Server version 1709. This flaw, stemming from improper memory object handling, allows a low-privileged attacker to gain elevated system privileges. With a CVSS score of 7.0 (High), exploitation requires local access and high attack complexity, but can lead to full compromise of confidentiality, integrity, and availability. While not actively exploited in the wild (KEV), public exploit code (EDB-43962) and community discussion indicate a known and documented attack vector.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
1703CPE matchmatch criteria | cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:* | ||
1709CPE matchmatch criteria | cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:* | ||
1709CPE matchmatch criteria | cpe:2.3:o:microsoft:windows_server_2016:1709:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
The average CVE in this peer group has 0.4 InfoSec Media, 0.1 Vendor Blog, and 0.0 Security Researcher mentions.