CVE-2018-8453: Microsoft Win32k Privilege Escalation Vulnerability
First published: Wed Oct 10 2018(Updated: )
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.
Credit: secure@microsoft.com secure@microsoft.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Microsoft Windows 10 | ||
| Microsoft Windows 10 | =1607 | |
| Microsoft Windows 10 | =1703 | |
| Microsoft Windows 10 | =1709 | |
| Microsoft Windows 10 | =1803 | |
| Microsoft Windows 10 | =1809 | |
| Microsoft Windows 7 | =sp1 | |
| Microsoft Windows 8.1 | ||
| Microsoft Windows RT | ||
| Microsoft Windows Server | =sp2 | |
| Microsoft Windows Server | =r2-sp1 | |
| Microsoft Windows Server | ||
| Microsoft Windows Server | =r2 | |
| Microsoft Windows Server 2016 | ||
| Microsoft Windows Server 2016 | =1709 | |
| Microsoft Windows Server 2016 | =1803 | |
| Microsoft Windows Server 2019 | ||
| Microsoft Windows 10 | ||
| Microsoft Windows 10 | ||
| Microsoft Windows 10 | ||
| Microsoft Windows 10 | ||
| Microsoft Windows 10 | ||
| Microsoft Windows 10 | ||
| Microsoft Windows 8.1 | ||
| Microsoft Windows Server | ||
| Microsoft Windows Server 1803 | ||
| Microsoft Win32 Kernel Subsystem |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://packetstormsecurity.com/files/153669/Microsoft-Windows-NtUserSetWindowFNID-Win32k-User-Callback.html
- http://www.securityfocus.com/bid/105467
- http://www.securitytracker.com/id/1041828
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8453
- https://securelist.com/cve-2018-8453-used-in-targeted-attack
- https://nvd.nist.gov/vuln/detail/CVE-2018-8453
Frequently Asked Questions
What is the severity of CVE-2018-8453?
CVE-2018-8453 is classified as a critical elevation of privilege vulnerability.
How do I fix CVE-2018-8453?
To fix CVE-2018-8453, install the latest security updates provided by Microsoft for affected Windows versions.
What systems are affected by CVE-2018-8453?
CVE-2018-8453 affects various versions of Windows including Windows 7, Windows 10, Windows Server 2008, and Windows Server 2019.
What type of vulnerability is CVE-2018-8453?
CVE-2018-8453 is an elevation of privilege vulnerability that can be exploited when the Win32k component fails to properly manage objects in memory.
What are the potential impacts of exploiting CVE-2018-8453?
Exploiting CVE-2018-8453 may allow an attacker to gain elevated privileges, enabling them to execute arbitrary code and affect system control.
- agent/type
- agent/description
- agent/title
- agent/remedy
- agent/weakness
- agent/author
- agent/severity
- agent/first-publish-date
- agent/references
- agent/source
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/event
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- collector/nvd-cve
- agent/softwarecombine
- agent/tags
- exploited/true
- ransomware/true
- collector/cisa-known-exploited
- source/CISA
- vendor/microsoft
- canonical/microsoft windows 10
- version/microsoft windows 10/1607
- version/microsoft windows 10/1703
- version/microsoft windows 10/1709
- version/microsoft windows 10/1803
- version/microsoft windows 10/1809
- canonical/microsoft windows 7
- version/microsoft windows 7/sp1
- canonical/microsoft windows 8.1
- canonical/microsoft windows rt
- canonical/microsoft windows server
- version/microsoft windows server/sp2
- version/microsoft windows server/r2-sp1
- version/microsoft windows server/r2
- canonical/microsoft windows server 2016
- version/microsoft windows server 2016/1709
- version/microsoft windows server 2016/1803
- canonical/microsoft windows server 2019
- canonical/microsoft windows server 1803
- canonical/microsoft win32 kernel subsystem