[ CVE-2018-8120 · Published 9 May 2018 ]
Microsoft Win32k Privilege Escalation Vulnerability
Exploited · CISA KEV CVSS 7.0
EPSS 73%Fix available
[ Why it matters ]Priority signals
- Exploited in the wild: on CISA's Known Exploited Vulnerabilities list since 2022-03-15
- Known to be used in ransomware campaigns
- EPSS: 73% chance of exploitation in the next 30 days (higher than 99% of CVEs)
[ Description ]Official description
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This affects Windows Server 2008, Windows 7, Windows Server 2008 R2. This CVE ID is unique from CVE-2018-8124, CVE-2018-8164, CVE-2018-8166.
CISA: A privilege escalation vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory.
[ Fixes ]Fixes and patches
CISA required action (US federal deadline 5 Apr 2022): Apply updates per vendor instructions.
- Patch on portal.msrc.microsoft.comVendor patch or bulletin · NVD · Reference tagged 'Patch' by NVD
[ References ]References
- www.securityfocus.com/bid/104034Broken LinkThird Party AdvisoryVDB Entry
- www.securitytracker.com/id/1040849Broken LinkThird Party AdvisoryVDB Entry
- portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8120PatchVendor Advisory
- www.exploit-db.com/exploits/45653ExploitThird Party AdvisoryVDB Entry
- www.cisa.gov/known-exploited-vulnerabilities-catalogUS Government Resource