Endpoint VulnerabilityMicrosoft Windows COM CVE-2018-8550 Elevation of Privilege Vulnerability
Description
Windows COM Aggregate Marshaler elevation of privilege flaw allows attackers to run arbitrary code with elevated privileges by exploiting incorrect interface request handling, potentially enabling remote code execution when combined with other vulnerabilities; affects Microsoft Windows systems.
Affected Applications
Windows RT 8.1
Windows Server version 1709 (Server Core Installation)
Windows Server 2016
Windows Server version 1803 (Server Core Installation)
Windows Server 2012
Windows 8
Windows Server 2008
Windows 10
Windows 7
Windows Server 2019
Version Updates
| Date | Version | Status | Detail |
|---|---|---|---|
| 2022-12-21 | 1.00365 |
Modified
|
Windows RT 8. 1,Windows Server version 1709 (Server Core Installation),Windows Server 2016,Windows Server version 1803 (Server Core Installation),Windows Server 2012,Windows 8,Windows Server 2008,Windows 10,Windows 7,Windows Server 2019 |
| 2022-12-14 | 1.00363 |
Modified
|
Windows Server version 1803 (Server Core Installation),Windows RT 8. 1,Windows Server 2016,Windows Server 2012,Windows 8,Windows Server 2008,Windows 10,Windows 7,Windows Server version 1709 (Server Core Installation),Windows Server 2019 |
| 2019-09-11 | 1.00194 |
Modified
|
Windows RT 8. 1,Windows Server, version 1709 (Server Core Installation),Windows Server 2016,Windows Server, version 1803 (Server Core Installation),Windows Server 2012,Windows 8,Windows Server 2008,Windows 10,Windows 7,Windows Server 2019 |
| 2019-01-08 | 1.00178 |
Modified
|
Windows RT 8. 1,Windows Server, version 1709 (Server Core Installation),Windows Server 2016,Windows Server, version 1803 (Server Core Installation),Windows Server 2012,Windows 8,Windows Server 2008,Windows 10,Windows 7,Windows Server 2019 |
| 2018-11-14 | 1.00175 |
New
|
Windows RT 8. 1,Windows Server, version 1709 (Server Core Installation),Windows Server 2016,Windows Server, version 1803 (Server Core Installation),Windows Server 2012,Windows 8,Windows Server 2008,Windows 10,Windows 7,Windows Server 2019 |
| ID | 55655 |
| Created | Nov 13, 2018 |
| Description Updated |
Jan 10, 2026 |
| CVE ID | |
| Risk |
|
| Coverage | FortiClient |
| OS | Windows |
| Vendor | Microsoft |
| Patch | auto |
| Application | Windows RT 8.1 , Windows Server version 1709 (Server Core Installation) , Windows Server 2016 , Windows Server version 1803 (Server Core Installation) , Windows Server 2012 , Windows 8 , Windows Server 2008 , Windows 10 , Windows 7 , Windows Server 2019 |