CVE-2018-1038
CVSS v3
7.8
HIGH
EPSS Score
8.5 %
exploit probability, as of 2026-10-05
CISA KEV
No
known exploited
Exploitation
—
SSVC status
Description
The Windows kernel in Windows 7 SP1 and Windows Server 2008 R2 SP1 allows an elevation of privilege vulnerability due to the way it handles objects in memory, aka "Windows Kernel Elevation of Privilege Vulnerability."
Technical details
- Published
- 2018-04-02
- Exploit-DB
- EDB-44581
Frequently asked questions
What is CVE-2018-1038?
The Windows kernel in Windows 7 SP1 and Windows Server 2008 R2 SP1 allows an elevation of privilege vulnerability due to the way it handles objects in memory, aka "Windows Kernel Elevation of Privilege Vulnerability."
Is CVE-2018-1038 actively exploited?
Active exploitation of CVE-2018-1038 has not been confirmed. Its EPSS score was 8.5% on 2026-10-05, the estimated probability of exploitation in the next 30 days.
What is the CVSS score for CVE-2018-1038?
CVE-2018-1038 has a CVSS v3 base score of 7.8 (HIGH severity).
Is CVE-2018-1038 affecting your environment?
Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.
No credit card required · 50 free checks/month · Free API key
Other 2018 vulnerabilities worth triaging
Ranked by exploit probability (EPSS).