Live › vulnerability › CVE-2018-8440
Go to dashboardAn elevation of privilege flaw in Windows lets a local user gain higher privileges because Windows mishandles calls to Advanced Local Procedure Call (ALPC). CISA lists it as exploited in the wild and it is tagged for ransomware use.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply updates per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Microsoft Windows | vendor | – | – |
Check installed Windows updates for the patch that addresses CVE-2018-8440 (Get-HotFix or Settings > Windows Update > Update history).
Apply the Microsoft security update for CVE-2018-8440 per vendor instructions, as CISA requires.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC), aka "Windows ALPC Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.
This page as .md · .json · in your agent: get_signal("CVE-2018-8440")
CISA KEV catalog, Creative Commons 0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.