CVE-2018-8120: Microsoft Win32k Privilege Escalation Vulnerability

Published May 9, 2018

Updated

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This affects Windows Server 2008, Windows 7, Windows Server 2008 R2. This CVE ID is unique from CVE-2018-8124, CVE-2018-8164, CVE-2018-8166.

Other sources

A privilege escalation vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory.

— CISA

Affected Software

5 affected components

Microsoft Windows 7=sp1

Microsoft Windows Server 2008=sp2

Microsoft Windows Server 2008=r2-sp1

Microsoft Win32k

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8120

Event History

May 9, 2018

CVE Published

via MITRE·07:00 PM

Data Sourced

via MITRE·07:00 PM

DescriptionWeakness

Data Sourced

via NVD·07:29 PM

RemedyDescriptionSeverityWeaknessAffected Software

Mar 15, 2022

Known Exploited

via CISA·12:00 AM

Known Ransomware

via CISA·12:00 AM

Frequently Asked Questions

What is the severity of CVE-2018-8120?

CVE-2018-8120 has a severity rating of important according to Microsoft.

How do I fix CVE-2018-8120?

To fix CVE-2018-8120, it is recommended to install the security updates provided by Microsoft for affected versions of Windows.

Which systems are affected by CVE-2018-8120?

CVE-2018-8120 affects Windows Server 2008, Windows 7, and Windows Server 2008 R2.

What type of vulnerability is CVE-2018-8120?

CVE-2018-8120 is classified as an elevation of privilege vulnerability.

Can CVE-2018-8120 be exploited remotely?

CVE-2018-8120 requires local access to exploit, meaning it cannot be exploited remotely.