CVE Watch13 ago 2026

CVE-2018-8120

Microsoft Win32k Privilege Escalation Vulnerability

CVSS

7.0

Alto

EPSS

73.4%

p99

KEV

SÍ

15 mar 2022

Exploit Today

0-100

Publicado: 9 may 2018 · Última mod.: 13 ago 2026 · CWE-404

EPSS · 30d

73.4%EPSS · 30 días73.4%

2026-09-162026-10-14

Ficha del catálogo KEV

Producto

Microsoft / Win32k

Vulnerabilidad

Microsoft Win32k Privilege Escalation Vulnerability

Añadido a KEV

15 mar 2022

Remediar antes de

5 abr 2022

Uso conocido en ransomware

Sí

Descripción resumida

A privilege escalation vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory.

Acción requerida

Apply updates per vendor instructions.

Notas

https://nvd.nist.gov/vuln/detail/CVE-2018-8120

Descripción técnica

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This affects Windows Server 2008, Windows 7, Windows Server 2008 R2. This CVE ID is unique from CVE-2018-8124, CVE-2018-8164, CVE-2018-8166.

Referencias oficiales

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-1108094.3 MED

—

——0A security vulnerability has been detected in sgl-project SGLang up to 0.5.19. Affected by this issue is the function Session.create_req of the file python/sglang/srt/session/session_controller.py of the component Session Cleanup. Such manipulation leads to denial of service. The attack may be performed from remote. The exploit has been disclosed publicly and may be used. The pull request to fix this issue awaits acceptance.13h CVE-2026-1108074.3 MED

—

——0A weakness has been identified in sgl-project SGLang up to 0.5.19. Affected by this vulnerability is an unknown functionality of the file python/sglang/srt/managers/io_struct.py of the component generate Endpoint. This manipulation of the argument session_params causes denial of service. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.14h CVE-2026-497857.8 ALT

25.9%

——8Improper resource shutdown or release in Windows UEFI allows an authorized attacker to bypass a security feature locally.2d CVE-2026-1091445.3 MED

26.3%

——8A vulnerability was identified in wbond certvalidator up to 0.11.1. This issue affects some unknown processing of the component Certificate Path Builder. Such manipulation leads to resource consumption. The attack can be launched remotely. The vendor was contacted early about this disclosure but did not respond in any way.2d CVE-2026-1091076.5 MED

43.3%

——13A weakness has been identified in Wavlink WL-WN592AX6 250422. Affected by this issue is the function main of the file /cgi-bin/upload.cgi. This manipulation of the argument Cookie causes null pointer dereference. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure.2d CVE-2026-1092773.3 BAJ

2.1%

——1ImageMagick before 7.1.2-32 contains a policy bypass vulnerability in the -script operation due to missing checks on file descriptor handling. Attackers can use the -script operation to close file descriptors not opened by the current operation, circumventing configured security policies.10h