CVE-2018-1036

CVE-2018-1036 is an elevation of privilege vulnerability in NTFS that affects various Windows operating systems, including Windows 7, 8.1, 10, and several Windows Server versions. With a CVSS score of 7.0 (HIGH), this vulnerability allows a low-privileged attacker to achieve high impact on confidentiality, integrity, and availability, though it requires high attack complexity and local access. While there is no known public exploit code in Metasploit or ExploitDB, and it is not listed in CISA's KEV catalog, community discussions indicate awareness among pentesters. Media coverage from June 2018 confirms Microsoft's patch for this issue.