Privilege escalation in 7-Zip

CVE-2018-10172

7-Zip through 18.01 on Windows implements the "Large memory pages" option by calling the LsaAddAccountRights function to add the SeLockMemoryPrivilege privilege to the user's account, which makes it easier for attackers to bypass intended access restrictions by using this privilege in the context of a sandboxed process. Note: This has been disputed by 3rd parties who argue this is a valid feature of Windows.

Vulnerability class: Privilege Escalation

EPSS: 0.004 (30.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H.

Affected products

  • 7-zip
  • N/a — versions n/a

Weakness classification (CWE)

Public proof-of-concept exploits

References

Frequently asked questions

What is CVE-2018-10172?
CVE-2018-10172 is a high-severity vulnerability in 7-Zip, classified under Improper Privilege Management. CVSS score: 8.8/10. Published 2018-04-16.
How severe is CVE-2018-10172?
High severity. CVSS v3 base score is 8.8 out of 10.
Is CVE-2018-10172 known to be exploited?
4 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.