CVE-2018-8453
Microsoft Win32k Privilege Escalation Vulnerability
CVSS
7.8
Alto
EPSS
70.0%
p99
KEV
SÍ
21 ene 2022
Exploit Today
80
0-100
Publicado: 10 oct 2018 · Última mod.: 13 ago 2026
Producto
Microsoft / Win32k
Vulnerabilidad
Microsoft Win32k Privilege Escalation Vulnerability
Añadido a KEV
21 ene 2022
Remediar antes de
21 jul 2022
Uso conocido en ransomware
Sí
Descripción resumida
Microsoft Windows Win32k contains a vulnerability that allows an attacker to escalate privileges.
Acción requerida
Apply updates per vendor instructions.
Notas
https://nvd.nist.gov/vuln/detail/CVE-2018-8453
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.
- packetstormsecurity.comhttp://packetstormsecurity.com/files/153669/Microsoft-Windows-NtUserSetWindowFNID-Win32k-User-Callback.html
- www.securityfocus.comhttp://www.securityfocus.com/bid/105467
- www.securitytracker.comhttp://www.securitytracker.com/id/1041828
- portal.msrc.microsoft.comhttps://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8453
- securelist.comhttps://securelist.com/cve-2018-8453-used-in-targeted-attack
- packetstormsecurity.comhttp://packetstormsecurity.com/files/153669/Microsoft-Windows-NtUserSetWindowFNID-Win32k-User-Callback.html
- www.securityfocus.comhttp://www.securityfocus.com/bid/105467
- www.securitytracker.comhttp://www.securitytracker.com/id/1041828
- portal.msrc.microsoft.comhttps://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8453
- securelist.comhttps://securelist.com/cve-2018-8453-used-in-targeted-attack
- www.cisa.govhttps://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-8453