An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.
References
| Link | Resource |
|---|---|
| http://packetstormsecurity.com/files/153669/Microsoft-Windows-NtUserSetWindowFNID-Win32k-User-Callback.html | Exploit Third Party Advisory VDB Entry |
| http://www.securityfocus.com/bid/105467 | Broken Link Third Party Advisory VDB Entry |
| http://www.securitytracker.com/id/1041828 | Broken Link Third Party Advisory VDB Entry |
| https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8453 | Patch Vendor Advisory |
| https://securelist.com/cve-2018-8453-used-in-targeted-attack | Exploit Technical Description Third Party Advisory |
Configurations
Configuration 1 (hide)
|
History
24 Jul 2024, 16:47
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://packetstormsecurity.com/files/153669/Microsoft-Windows-NtUserSetWindowFNID-Win32k-User-Callback.html - Exploit, Third Party Advisory, VDB Entry | |
| References | () http://www.securityfocus.com/bid/105467 - Broken Link, Third Party Advisory, VDB Entry | |
| References | () http://www.securitytracker.com/id/1041828 - Broken Link, Third Party Advisory, VDB Entry | |
| CWE | NVD-CWE-noinfo | |
| CPE | cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_server_2016:1709:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_server_2016:1803:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:* |
cpe:2.3:o:microsoft:windows_server_1803:-:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_server_1709:-:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_10_1507:-:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_10_1703:-:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_10_1709:-:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_10_1803:-:*:*:*:*:*:*:* |
| First Time |
Microsoft windows Server 1709
Microsoft windows 10 1803 Microsoft windows 10 1507 Microsoft windows 10 1703 Microsoft windows 10 1809 Microsoft windows Server 1803 Microsoft windows 10 1607 Microsoft windows 10 1709 |
Information
Published : 2018-10-10 13:29
Updated : 2024-07-24 16:47
NVD link : CVE-2018-8453
Mitre link : CVE-2018-8453
CVE.ORG link : CVE-2018-8453
JSON object : View
Products Affected
microsoft
- windows_10_1803
- windows_server_2012
- windows_8.1
- windows_server_1709
- windows_server_2016
- windows_10_1507
- windows_7
- windows_10_1709
- windows_10_1809
- windows_server_1803
- windows_10_1607
- windows_server_2019
- windows_server_2008
- windows_10_1703
- windows_rt_8.1
CWE