CVE-2018-0886

CVE-2018-0886 is a remote code execution vulnerability in the Credential Security Support Provider protocol (CredSSP) affecting numerous Microsoft Windows versions, including Windows 7, 8.1, 10, and various Server editions. This flaw allows an attacker to execute arbitrary code due to improper validation of requests during the authentication process. With a CVSS score of 7.0 (HIGH) and an EPSS score indicating high exploitability, the vulnerability presents a significant risk, requiring user interaction and high attack complexity but leading to full confidentiality, integrity, and availability compromise. While not listed on the KEV catalog, public exploit code exists (EDB-44453), and the vulnerability has garnered substantial community discussion and media coverage, indicating widespread awareness and potential for exploitation.